Risk management

Risk management here is not a maturity score. It is naming which requirement is a gate and which one you can open in a foreseeable time.

ISO 45001, ISO 27001 and ISO 9001 all ask that risks are named and kept up to date. A buyer reads the register, not the intention.

I help set the register up so that it matches how the work actually runs, and so that an external audit can follow it.

I do not give a maturity number. A score without a source is worthless here.

Request a conversation

Related

• ISO 45001

  Prepare for ISO 45001 (ISO45001) when a buyer requires occupational health and safety management. The certification body decides.

• ISO 27001

  Prepare for ISO 27001 (ISO27001) when a buyer requires information security. No promise of a certificate.

• ISO 9001

  Prepare for ISO 9001 (ISO9001) when a buyer requires quality management. The certification body issues the certificate.