Which of the following ensures that uncertainty is managed so the organization can meet its objectives?

Enhanced risk management refers to the improvement of an organization's risk management practices to make them more effective in managing uncertainty and achieving objectives. According to ISO 31000:2018, the purpose of risk management is the creation and protection of value, which involves improving performance and encouraging innovation. By applying the principles and framework of ISO 31000, an organization enhances its ability to make informed decisions, allocate resources effectively, and proactively address the effects of uncertainty on its objectives. This improved, or "enhanced," approach is central to the standard's philosophy of integrating risk management into all organizational activities.

A. Extended risk management: This term often refers to Enterprise Risk Management (ERM), focusing on the scope across an entire organization, but "enhanced" better describes the improved quality and effectiveness of the process itself.

C. Evasive risk management: This is not a recognized term in the ISO 31000 framework or professional risk management literature. It implies avoiding risk, which is contrary to proactive management.

D. Avoidance risk management: Risk avoidance is a specific risk treatment option (i.e., deciding not to pursue an activity), not a comprehensive management approach that ensures all objectives are met.

1. ISO 31000:2018

Risk management — Guidelines.

Section 4

Principles: This section outlines the principles for effective risk management. Adherence to these principles (e.g.

integrated

structured

customized

dynamic) results in an enhanced management capability. The foreword states the standard's purpose is to "enable organizations to manage risk effectively."

Introduction: The standard states

"Risk management is part of governance and leadership

and is fundamental to how the organization is managed at all levels. It contributes to the improvement of management systems." This contribution to improvement is the essence of enhancement.

2. Standards Australia/ISO. (2021). ISO 31000:2018 - Risk management - A practical guide. ISO.

Page 1: The guide states that ISO 31000 provides a basis for "enhancing risk management throughout an organization." This directly links the standard's application to the concept of "enhanced risk management."

3. Purdy

G. (2010). ISO 31000:2009—Setting a New Standard for Risk Management. Risk Analysis: An International Journal

30(6)

881-886. https://doi.org/10.1111/j.1539-6924.2010.01442.x

Page 884: The article discusses how ISO 31000 provides a framework that

when implemented

leads to improved or enhanced decision-making by explicitly addressing uncertainty

which is the core of the question.

4. Lalonde

C.

& Boiral

O. (2012). Managing risks through ISO 31000: A critical analysis. Risk Management

14(4)

272-300. https://doi.org/10.1057/rm.2012.9

Page 273: The authors analyze how ISO 31000 aims to improve upon previous risk management approaches

framing it as a tool for enhancing organizational resilience and performance by systematically managing uncertainty.