Which of the following is becoming the basis for all decision making?

According to the principles outlined in ISO 31000:2018, effective risk management is integral to all organizational activities, including and especially decision-making. The standard posits that managing risk is not a standalone activity but a fundamental component of governance and leadership. It helps decision-makers make informed choices by providing a structured approach to understanding uncertainty and its potential effect on objectives. By integrating risk considerations into every decision, from strategic planning to operational changes, an organization enhances its ability to achieve its goals and improve its performance. This positions risk management as a foundational element for all decision-making processes.

B. Crisis management: This is a reactive discipline for responding to significant negative events, not a proactive framework for all routine and strategic decisions.
C. Quality management: This focuses on meeting requirements and enhancing customer satisfaction, which is a critical but specific subset of overall organizational decision-making.
D. Marketing management: This is a specific functional discipline concerned with promoting and selling products/services, not the underlying basis for all organizational decisions.

1. ISO 31000:2018, Risk management — Guidelines. Clause 4, Principles. Principle (d) explicitly states that risk management is "Part of decision-making." The clause elaborates: "Risk management helps decision-makers to make informed choices, prioritize actions and distinguish among alternative courses of action... The information derived from risk management should be timely, clear, and available to relevant stakeholders."

2. Purdy, G. (2010). ISO 31000:2009—Setting a New Standard for Risk Management. Risk Analysis: An International Journal, 30(6), 881-886. On page 883, the author discusses the principles of the standard, stating, "The fourth principle is that risk management is part of decision making. Risk management can help with making choices, prioritizing, and selecting the best course of action." DOI: https://doi.org/10.1111/j.1539-6924.2010.01442.x

3. Lalonde, C., & Boiral, O. (2012). Managing risks through ISO 31000: A critical analysis. Risk Management, 14(4), 272-300. The paper notes that a key aspect of ISO 31000 is its emphasis on integrating risk management into the "organization’s governance, strategy and planning, management, reporting processes, policies, values and culture" (p. 275), which are all centered around decision-making. DOI: https://doi.org/10.1057/rm.2012.9