ONR 49000

The ON Rule on risk management covers the risk management of organisations and systems. It describes how risks can be identified, analysed, assessed and treated. Risk management also comprises crisis management and business continuity management. The risk management system shows how risk management can be implemented and maintained effectively and improved continually. In this context, risk management may be embedded in the existing management system or established in a stand-alone risk management system. The present ON Rule 49000 defines the terms and describes the basics of risk management. This includes its application and interaction with other management instruments. Additionally, the objectives and principles of risk management are presented. The terms used below follow the model of ISO Guide 73:2008 "Risk Management, Vocabulary" (in preparation). The objectives and principles are in line with the new ISO/DIS 31000 "Risk Management, Principles and Guidelines on Implementation".