Which of the following consists of risk management principles, framework, and process that have been adopted as a national risk management standard by more than 60 countries?

ISO 31000:2018, titled "Risk management — Guidelines," is the international standard that provides the core principles, a comprehensive framework, and a structured process for managing risk. It is designed to be generic and applicable to any organization, regardless of its size, activity, or sector. Its fundamental and universal approach has led to its widespread adoption by numerous countries as their national standard for risk management, facilitating a common global language and methodology for handling uncertainty and achieving objectives.

A. ISO 9001:2015: This standard specifies requirements for a quality management system (QMS). While it incorporates risk-based thinking, its primary focus is on quality, not general risk management.
B. ISO 27001:2013: This standard is specific to information security management systems (ISMS), detailing requirements for managing information security risks, not organizational risks in general.
D. ISO 14001:2018: This standard outlines the requirements for an environmental management system (EMS). It addresses environmental risks but is not the overarching standard for enterprise-wide risk management.

1. International Organization for Standardization (ISO). (2018). ISO 31000:2018 Risk management — Guidelines.

Section: Introduction, Paragraph 1: "This document provides guidelines on managing risk faced by organizations. The application of these guidelines can be customized to any organization and its context." This confirms its role as the guideline for risk management.

Section: 1 Scope, Paragraph 1: "This document provides guidelines on managing risk faced by organizations... It can be used by any organization, regardless of its size, activity or sector." This highlights its universal applicability.

2. International Organization for Standardization (ISO). (n.d.). ISO 31000 Risk management. ISO.org.

Webpage Content: The official ISO promotional page for the standard states, "ISO 31000 has also been adopted as a national standard in more than 70 countries." This directly supports the premise in the question.

3. Lalonde, C., & Boiral, O. (2012). Managing risks through ISO 31000: A critical analysis. Risk Management, 14(4), 272-300.

Abstract & Introduction: The paper discusses the role and diffusion of ISO 31000 as a global benchmark for risk management practices, underscoring its function as a foundational standard intended for wide adoption. (DOI: https://doi.org/10.1057/rm.2012.9)