ISO 31000:2018
ISO 31000Risk Management in the UAE & Saudi Arabia
Principles and a process for enterprise risk management that fits any organisation. It is guidance, so it is adopted rather than certified.
Guidance standard — implemented, not certified
Typically needed by
- ✓Boards and risk committees setting up ERM
- ✓Organisations aligning departmental risk registers into one view
Scope your ISO 31000 project
We’ll get back to you about the next step.
Saudi Arabia
A common reference for ERM frameworks in government and financial services.
United Arab Emirates
A common reference for ERM frameworks in government and financial services.
What the engagement looks like
- 01
Current-state review against the guidance
- 02
Framework, roles and policy design
- 03
Process and tool roll-out
- 04
Training for owners and users
- 05
Reporting and continual improvement cycle
Timelines depend on size, sites and existing documentation — you get a realistic plan after scoping, not a one-size promise.
ISO 31000 training
ISO 31000 questions
Who issues the ISO 31000 certificate?+
ISO 31000 is a guidance standard, so organisations implement it rather than certify against it.
Can our team be trained on ISO 31000?+
Yes — options include Risk Management Professional Training, ISO 31000 Internal Auditor. Public, virtual and in-house formats can be arranged; ask for current dates and fees.
Next step
Start with a ISO 31000 readiness review
Seven questions, two minutes — see where you stand before the first call.