Independent UK Certification Body

Risk Management Certification

ISO 31000:2009 provides principles and generic guidelines on risk management - the process of identifying, assessing and controlling threats to an organisation's capital and earnings, from financial uncertainty and legal liabilities to accidents and natural disasters. International Assessment Bureau carries out independent, impartial audits against the standard and issues certification.

Get a Quote Talk to an Assessor

UK-based certification body

Not specific to any industry or sector

Clear, fixed-fee quotes

The Standard

What ISO 31000:2009 Covers

Identifying Threats

A systematic process for identifying, assessing and controlling risks to capital and earnings, including increasingly important digital-asset risks.

Applies Anywhere

Usable by any public, private or community enterprise, association, group or individual - not specific to any industry or sector.

Any Type of Risk

Can be applied throughout the life of an organisation, to strategies, decisions, operations, processes, projects, products, services and assets.

A Common Framework

Intended to harmonise risk management processes across existing and future standards, providing a common approach without replacing sector-specific standards.

Why It Matters

What ISO 31000:2009 Does For Your Organisation

Creates a safer workplace: helps create a safe and secure work environment for staff and customers.

Increases stability: increases the stability of business operations while decreasing legal liability.

Protects people and assets: protects people, assets and the environment from events that could cause harm.

Controls insurance costs: helps establish the organisation's insurance needs, avoiding unnecessary premiums.

Supports confident decisions: gives management the confidence to make business decisions with risk properly understood and controlled.

How It Works

Our Certification Process at a Glance

Application & Quote

Tell us about your organisation and scope. We provide a clear, fixed quote.

Payment & Invoice

Once you accept the quote, we issue an invoice and confirm your certification agreement before scheduling the audit.

Stage 1, Stage 2 & Surveillance Audits

On-site/remote assessment of your risk management framework in operation against the standard, followed by ongoing surveillance audits.

Certification Decision

An independent technical review confirms the certification decision.

Certificate & Surveillance

Certificate issued, with annual surveillance audits to keep it valid.

See our full certification process for more detail on each stage.

Background

About ISO 31000:2009

International Assessment Bureau is an independent certification body based in the UK. Risk management can be applied to an entire organisation, at many areas and levels, or to specific functions, projects and activities. Adopting consistent processes within a comprehensive framework helps ensure risk is managed effectively, efficiently and coherently, in a systematic, transparent and credible way.

While ISO 31000:2009 provides generic guidelines, it is not intended to promote uniformity of risk management across organisations - the design and implementation of a risk management framework needs to take account of each organisation's own objectives, context, structure and operations. ISO itself issues no certification or conformity test directly - it develops the standards through a consensus-based process involving technical committees, industry experts, consumer organisations and national standards bodies. Certification against ISO 31000:2009 is carried out by certification bodies such as International Assessment Bureau. If you are planning to get your organisation certified, get in touch with our team and we will walk you through exactly what is required for your sector and scope.

Ready to Start Your ISO 31000:2009 Certification?

Tell us about your organisation and we'll come back with a clear, no-obligation quote.

Get a Quote Ask a Question