How many risk management principles exists ISO 31000:2018?

ISO 31000:2018, in Clause 4, specifies the principles that are the foundation for managing risk effectively. The standard explicitly lists eight principles that guide organizations in creating and protecting value. These principles are:

1. Integrated

2. Structured and comprehensive

3. Customized

4. Inclusive

5. Dynamic

6. Best available information

7. Human and cultural factors

8. Continual improvement

These principles ensure that an organization's risk management is a coherent and integral part of all its activities.

A. 7: This is an incorrect count. The standard clearly defines eight distinct principles for effective risk management.

C. 9: This is an incorrect count. The previous version of the standard (ISO 31000:2009) had 11 principles, but the current 2018 version has eight.

D. 6: This is an incorrect count, significantly understating the number of foundational principles outlined in the standard.

1. International Organization for Standardization. (2018). ISO 31000:2018 Risk management — Guidelines. Clause 4, pp. 2-4. This clause is titled "Principles" and lists the eight principles of risk management.

2. The University of Queensland. (2021). Enterprise Risk Management Framework. Section 3.1 Risk Management Principles, p. 7. This document adopts the ISO 31000:2018 standard and lists the same eight principles.

3. Lalonde, C., & Boiral, O. (2012). Managing risks through ISO 31000: A critical analysis. Risk Management, 14(4), 272-300. https://doi.org/10.1057/rm.2012.9. (Note: While this paper predates the 2018 revision, it analyzes the principles of the 2009 version, highlighting the evolution to the more concise eight principles in the 2018 standard discussed in subsequent academic literature). The 2018 revision is noted for its consolidation of these principles.