Risk Framework

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Definition

Risk Framework (also Risk Management Framework) is the totality of Risk Policies, internal Risk Management Processes and Risk Tools used by an organization to manage the variety of risks it is facing.

List of Risk Frameworks

The following list points to collections of publicly accessible documents defining risk management frameworks in different disciplines

General Risk Management:
- ISO 31000 provides principles, framework and a process for managing risk regardless of size, activity or sector. The standard is not publicly available.
IT Risk Management
- NIST Guide for Applying the Risk Management Framework to Federal Information Systems
- NIST Cybersecurity Framework
Project Risk Management
Financial Risk Management:
- ESG Risk Management
Energy Risk Framework