/ ISO 31000 · Risk management guidelines
We assess how your organisation governs risk, sets criteria, identifies and analyses uncertainty, selects treatments, monitors change and reports decisions against ISO 31000 principles and guidance.
ISO 31000 provides guidance rather than certifiable management-system requirements. This engagement is a risk management review, not a certification audit or certificate.
Scope a risk management reviewDelivered across Australia — all states and territories — with remote delivery and onsite attendance by arrangement. New Zealand and wider Asia Pacific engagements may be available by arrangement.
/ Engagement scope
Leadership, accountability and integration with decision-making
Risk framework design, roles, appetite, criteria and escalation
Risk identification, analysis, evaluation and treatment practice
Consultation, communication, monitoring, review and continual improvement
A traceable findings report with priorities and recommended actions
Our team combines implementation, audit, security-governance and technical expertise. Across their professional careers, team members have delivered 2,000+ hours of ISO, ISM and GRC audit work across 70+ organisations.
Qualifications, professional credentials and formal training held across Aegentra’s delivery team.
Further training and audit qualifications across the team include ISO/IEC 42001 Lead Implementer training, ASD ISM General and Technical audit codes, ISO/IEC 27017 and ISO/IEC 27018 audit codes, and ISO 9001 and ISO 19011 audit qualifications.
NV1 security clearance is held within the team. It is a personnel clearance, not a company accreditation or government endorsement. Any clearance requirement and the assigned consultant’s current status are confirmed for the engagement.
Credentials are held across the team and matched to assigned roles. Your proposal identifies the consultants, their responsibilities and the relevant qualification evidence before work begins.
/ Frequently asked questions
No. ISO 31000 is a guidance standard, not a certifiable management-system standard. Aegentra reviews your framework and practice against its principles and guidance but does not issue an ISO certificate.
No. A risk assessment examines defined risks. This review examines the organisation-wide governance, framework and process used to manage risk, including how assessments inform decisions and treatments.