What is ISO 31000?
ISO 31000 provides principles and generic guidelines on risk management, helping organisations of all types integrate risk-informed decision-making into governance, strategy and operations.
Benefits of Certification
- ✔Embed structured risk-based decision-making
- ✔Improve resilience and opportunity capture
- ✔Strengthen governance and accountability
- ✔Support strategic and operational planning
- ✔Enhance stakeholder confidence
Scope
Applicable to all organisations and can be applied to any activity, decision or function where risk needs to be managed.
Who it applies to
- ●All sectors and organisation types
- ●Financial & insurance
- ●Infrastructure & utilities
- ●Public sector & governance
- ●Manufacturing & supply chain
- ●Professional services
What the scope covers
- ▸Risk management framework and leadership
- ▸Integration into governance and processes
- ▸Risk identification, analysis and evaluation
- ▸Risk treatment and monitoring
- ▸Communication and consultation
- ▸Continual improvement of the framework
Key Requirements
- ▸Risk management framework and leadership
- ▸Integration into governance and processes
- ▸Risk assessment: identification, analysis, evaluation
- ▸Risk treatment and monitoring
- ▸Communication and consultation
- ▸Continual improvement of the framework
Certification Process
- 1
Application & Quotation
Submit your details and receive a tailored, fixed-price quotation based on scope, sites and headcount.
- 2
Gap Analysis (Optional)
An optional pre-audit review identifies gaps between your current practices and the standard.
- 3
Stage 1 Audit
Documentation review to confirm your management system is designed and ready for assessment.
- 4
Stage 2 Audit
On-site (or remote) assessment of the implementation and effectiveness of your system.
- 5
Certification Decision
An independent technical review leads to the certification decision and issue of your certificate.
- 6
Surveillance & Renewal
Annual surveillance audits maintain your certification over the three-year cycle before recertification.
Documents Required
- 📄Company registration / incorporation details
- 📄Organisation chart and list of sites
- 📄Scope statement of activities
- 📄Management system manual / documented information
- 📄Key policies and procedures relevant to the standard
- 📄Records demonstrating implementation (audits, reviews, training)
Frequently Asked Questions
How long does ISO 31000 certification take?
Typical timelines range from 4 to 12 weeks depending on the size of your organisation, the number of sites and how mature your existing management system is.
How long is a ISO 31000 certificate valid?
Certificates are issued for a three-year cycle, subject to successful annual surveillance audits, after which recertification renews the cycle.
Can the audit be conducted remotely?
Yes. Where appropriate, UKCTL can conduct Stage 1 and parts of Stage 2 remotely, combined with on-site verification as required.
Is ISO 31000 certification accredited?
UKCTL issues accredited certificates recognised internationally, giving your customers and stakeholders confidence in the assessment.
Get ISO 31000 certified with UKCTL
Apply Now