This document is for use by people who create and protect value in organizations by managing risks, making decisions, setting and achieving objectives and improving performance. Organizations of all types and sizes face external and internal factors and influences that make it uncertain whether they will achieve their objectives. Managing risk is iterative and assists organizations in setting strategy, achieving objectives and making informed decisions. Managing risk is part of governance and leadership, and is fundamental to how the organization is managed at all levels. It contributes to the improvement of management systems. Managing risk is part of all activities associated with an organization and includes interaction with stakeholders. Managing risk considers the external and internal context of the organization, including human behaviour and cultural factors.

Return Policy

ASSP does not accept returns on standards, either digital or hardcopy versions. Please read the sales page of the specific standard of interest and review the scope and table of contents to ensure applicability to your needs. If your concerns are related to the quality of a standard, please contact ASSP Standards Development staff.