URM’s blog explores how Cyber Essentials can help your legal practice enhance its security posture and achieve/maintain its SQM or Lexcel accreditation.

Events

About Us

About URM

Overview

URM Core Values

Certifications

CSR

Testimonials

Partners

Our Partners

Become Partner

Subscribe to our mailing list

Abriska 31000

Frequently Asked Questions

What is enterprise risk management?

In attempting to meet its business objectives, every organisation faces internal and external factors and influences which create uncertainty.

The effect this uncertainty has on an organisation’s objectives can be termed ‘risk’.

Enterprise risk management encompasses those activities which allow us to better identify, analyse and evaluate risks, and manage them proactively, in order to minimise any possible damage and maximise any opportunities.

It is important to note the last point, as risk often has negative connotations, yet there can be positive outcomes.

The other thing to note is that whilst the term enterprise is often perceived in different ways, it really is a universal term that relates to every organisation, irrespective of size (e.g. SME or multinational) or market sector (e.g. public or private).

Enterprise risk management is a continuous process and needs to be managed throughout the year in order to help protect your organisation from an array of everyday threats.

One key requirement is that you need to ensure risks are managed logically and systematically. This is where ISO 31000, the International Standard for Risk Management can help by providing principles and generic guidelines.

What is ISO 31000?

While all organisations consciously or unconsciously manage risks to some degree, ISO 31000 establishes a number of principles which your organisation can follow in order to make risk management more effective.

This International Standard is based on developing, implementing and continuously improving a risk management framework which is totally integrated into an organisation’s corporate governance, management system, values and culture.

By adopting an ISO 31000 approach across your enterprise, you can ensure risk is managed efficiently, effectively and consistently.

The versatility of ISO 31000 means that its principles and guidelines can be used to manage any form of enterprise risk in a systematic and transparent manner, and within any scope and context.

As such, the starting point with any risk management process is to establish the context, e.g. capturing objectives, stakeholders, risk criteria.

The fundamental risk management process is depicted in the figure.

What is enterprise risk management software?

Enterprise risk management software can support your organisation by helping you to identify, analyse and evaluate risks across your business in a uniform, predetermined approach.

The end result is that the process for assessing and managing all risks is identical and risks can be treated based on your organisation’s risk appetite.

Download Abriska 31000 Product Sheet

Abriska 31000 overview

We were impressed with the implementation and management of the Abriska tool. The service we have received is of a high quality due to the Team’s attention to detail, proactiveness and implementation of enhancement requests from the dev side. The Board is also impressed with the tool and is looking to complete an organisation-wide implementation soon. We will definitely recommend other charity contacts to use the tool, as it is well priced and comes with excellent customer service.

Masonic Charitable Foundation