Which of the following is a process with inputs, activities, and outcomes?

ISO 31000:2018 explicitly defines and describes risk management as a systematic and structured process. Clause 6 of the standard is dedicated entirely to this process, outlining its components: establishing the context, risk assessment (identification, analysis, evaluation), and risk treatment. This process takes specific inputs (e.g., organizational objectives, external and internal context), involves a sequence of activities, and produces distinct outcomes (e.g., a better understanding of risks, risk treatment plans, and input for decision-making). The standard's own diagram (Figure 4) visually represents this flow, confirming its nature as a process with inputs, activities, and outcomes.

A. Supply chain management: While it contains numerous processes, it is a broad management discipline, not defined as a singular, specific process within the ISO 31000 framework.

B. Financial management: This is a functional area of management that relies on various processes but is not itself defined as the process in the context of ISO 31000.

C. Quality management: This is a distinct management system (e.g., ISO 9001) with its own process approach, but it is not the subject defined by the ISO 31000 standard.

1. International Organization for Standardization. (2018). ISO 31000:2018 – Risk management — Guidelines.

Clause 6

"Process": This entire section details the systematic activities of risk management

from "Scope

context and criteria" (6.3) through "Risk treatment" (6.5).

Figure 4 — Process: This diagram provides a visual representation of the risk management process

illustrating the flow of activities and the continuous nature of communication

monitoring

and recording.

2. Purdy

G. (2010). ISO 31000:2009—Setting a new standard for risk management. Risk Analysis: An International Journal

30(6)

881-886.

Page 883: The article explicitly identifies the "risk management process" as one of the three core elements of the standard

describing it as a series of steps that organizations should follow. DOI: https://doi.org/10.1111/j.1539-6924.2010.01442.x

3. Lalonde

C.

& Boiral

O. (2012). Managing risks through ISO 31000: A critical analysis. Risk Management

14(4)

272-300.

Page 275: The authors describe the ISO 31000 standard's approach

stating

"The risk management process proposed by the ISO 31000 standard is based on a series of logical and systematic stages

" reinforcing its definition as a structured process. DOI: https://doi.org/10.1057/rm.2012.13