【正文】
and協(xié)調(diào)風(fēng)險(xiǎn)管理利益相關(guān)者之間的利益? ensure that the framework for managing risk continues to remain appropriate. 確保風(fēng)險(xiǎn)管理框架穩(wěn)步進(jìn)行。使風(fēng)險(xiǎn)管理目標(biāo)與組織目標(biāo)和戰(zhàn)略相一致? ensure legal and regulatory pliance。制定風(fēng)險(xiǎn)管理政策? ensure that the organization39。If an organization39。該框架確保在流程中派生出來的風(fēng)險(xiǎn)信息得以適當(dāng)?shù)膱?bào)告,并將其用來做出決策和使組織相關(guān)層級保持職責(zé)相關(guān)。k) Risk management facilitates continual improvement of the Organizations should develop and implement strategies to improve their risk management maturity alongside all other aspects of their organization.Annex A provides further advice for organizations wishing to manage risk more effectively.組織應(yīng)制訂和實(shí)施戰(zhàn)略,以改善組織各個(gè)方面的風(fēng)險(xiǎn)管理的成熟。i) Risk management is transparent and Appropriate and timely involvement of stakeholders and, in particular, decision makers at all levels of the organization, ensures that risk management remains relevant and uptodate. Involvement also allows stakeholders to be properly represented and to have their views taken into account in determining risk criteria.及時(shí)的、適當(dāng)?shù)奈绽嫦嚓P(guān)者,尤其是組織各層面的決策者參與風(fēng)險(xiǎn)管理,確保風(fēng)險(xiǎn)管理是相關(guān)的和跟得上形式的。g) Risk management is Risk management is aligned with the organization39。d) Risk management explicitly addresses Risk management explicitly takes account of uncertainty, the nature of that uncertainty, and how it can be addressed.風(fēng)險(xiǎn)管理明確的考慮到不確定性及這種不確定性的性質(zhì),以及如何加以解決。a) Risk management creates and protects Risk management contributes to the demonstrable achievement of objectives and improvement of performance in, for example, human health and safety, security, legal and regulatory pliance, public acceptance, environmental protection, product quality, project management, efficiency in operations,governance and reputation.風(fēng)險(xiǎn)管理有助于目標(biāo)達(dá)成和績效的明顯改善,例如,人類健康和安全,保安,法律和法規(guī)遵從性,公眾接受性,環(huán)保,產(chǎn)品質(zhì)量,項(xiàng)目管理,運(yùn)營效率,治理和聲譽(yù)。消除風(fēng)險(xiǎn)源? changing the likelihood ()。因此,在風(fēng)險(xiǎn)管理術(shù)語中,“可能性”,被富有同非英語國家的“概率”同樣的廣義解釋。 and通過影響而非權(quán)力影響決策的過程? an input to decision making, not joint decision [ISO Guide 73:2009, definition ]person or organization that can affect, be affected by, or perceive themselves to be affected by a decision or activity 可以影響、被影響或者覺得自己會(huì)被決策或者活動(dòng)影響的個(gè)人或組織NOTE A decision maker can be a [ISO Guide 73:2009, definition ] assessment風(fēng)險(xiǎn)評估overall process of risk identification (), risk analysis () and risk evaluation ()風(fēng)險(xiǎn)識別,風(fēng)險(xiǎn)分析和風(fēng)險(xiǎn)評價(jià)的整個(gè)過程 [ISO Guide 73:2009, definition ] identification風(fēng)險(xiǎn)識別process of finding, recognizing and describing risks ()發(fā)現(xiàn)、識別、描述風(fēng)險(xiǎn)的過程N(yùn)OTE 1 Risk identification involves the identification of risk sources (), events (), their causes and their potential consequences ().風(fēng)險(xiǎn)識別包括風(fēng)險(xiǎn)源的識別、風(fēng)險(xiǎn)事件的識別、風(fēng)險(xiǎn)原因及潛在后果的識別NOTE 2 Risk identification can involve historical data, theoretical analysis, informed and expert opinions, and stakeholder39。s culture。能力、資源和知識(如資本、時(shí)間、人、流程、系統(tǒng)和技術(shù))? perceptions and values of internal stakeholders。文化、社會(huì)、政治、法律、監(jiān)管、財(cái)政金融、技術(shù)、經(jīng)濟(jì)、自然和競爭環(huán)境,無論是國際,國家,區(qū)域或地方? key drivers and trends having impact on the objectives of the organization。NOTE 4 Risk is often expressed in terms of a bination of the consequences of an event (including changes in circumstances) and the associated likelihood () of occurrence.注4:風(fēng)險(xiǎn)往往表達(dá)了對事件后果(包括環(huán)境的變化)和相關(guān)的可能性概率()。This International Standard is not intended for the purpose of certification.本標(biāo)準(zhǔn)不適合認(rèn)證目的。Although this International Standard provides generic guidelines, it is not intended to promote uniformity of risk management across organizations. The design and implementation of risk management plans and frameworks will need to take into account the varying needs of a specific organization, its particular objectives,context, structure, operations, processes, functions, projects, products, services, or assets and specific practices employed.盡管本國際標(biāo)準(zhǔn)提供了風(fēng)險(xiǎn)管理的一般準(zhǔn)則,但不是為了促進(jìn)各組織風(fēng)險(xiǎn)管理的統(tǒng)一性。因此,這個(gè)國際標(biāo)準(zhǔn)是不針對特殊行業(yè)或部門。In this International Standard, the expressions “risk management” and “managing risk” are both used. In general terms, “risk management” refers to the architecture (principles, framework and process) for managing risks effectively, while “managing risk” refers to applying that architecture to particular risks.在本國際標(biāo)準(zhǔn)中,“風(fēng)險(xiǎn)管理”和“管理風(fēng)險(xiǎn)”同時(shí)使用。c) those who need to evaluate an organization effectiveness in managing risk。 and提高組織的學(xué)習(xí)能力? improve organizational resilience. 提高組織的應(yīng)變能力This International Standard is intended to meet the needs of a wide range of stakeholders, including: 本標(biāo)準(zhǔn)是為了滿足廣大利益相關(guān)者需要,包括:a) those responsible for developing risk management policy within their organization。 加強(qiáng)健康和安全業(yè)績,以及環(huán)境的保護(hù)。 建立決策和規(guī)劃提供可靠的根基? improve controls。 符合有關(guān)法律及監(jiān)管要求和國際規(guī)范? improve financial reporting。? be aware of the need to identify and treat risk throughout the organization。The relationship between the principles for managing risk, the framework in which it occurs and the risk management process described in this International Standard are shown in Figure 1.本標(biāo)準(zhǔn)描述了風(fēng)險(xiǎn)管理的原則、框架、風(fēng)險(xiǎn)管理的流程之間的關(guān)系,如圖1所示。在本標(biāo)準(zhǔn)規(guī)定的一般性的原則和方針,目的在于在任何的環(huán)境和背景下,系統(tǒng)的、清晰的、可靠的方式管理風(fēng)險(xiǎn)。s overall governance, strategy and planning,management, reporting processes, policies, values and culture.盡管所有的組織在某種程度上都在管理風(fēng)險(xiǎn),本標(biāo)準(zhǔn)規(guī)定了一些原則,以使風(fēng)險(xiǎn)管理變得有效。組織通過識別、分析、評價(jià)風(fēng)險(xiǎn)以及處理風(fēng)險(xiǎn),以滿足他們的風(fēng)險(xiǎn)標(biāo)準(zhǔn)。Introduction簡介Organizations of all types and sizes face internal and external factors and influences that make it uncertain whether and when they will achieve their objectives. The effect this uncertainty has on an organization39。International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2.國際標(biāo)準(zhǔn)是根據(jù)ISO/IEC導(dǎo)則第2部分的規(guī)則起草的。制定國際標(biāo)準(zhǔn)工作通常由ISO的技術(shù)委員會(huì)完成。個(gè)成員團(tuán)體若對某技術(shù)委員會(huì)確定的項(xiàng)目感興趣,均由權(quán)參加該委員會(huì)的工作。The main task of technical mittees is to prepare International Standards. Draft International Standards adopted by the technical mittees are circulated to the member bodies for voting. Publication as an International Standard requires approval by at least 75 % of the member bodies casting a vote.由技術(shù)委員會(huì)通過的國際標(biāo)準(zhǔn)草案提交各成員團(tuán)體投票表決,需取得了至少3/4參加表決的成員團(tuán)體的同意,國際標(biāo)準(zhǔn)草案才能作為國際標(biāo)準(zhǔn)證實(shí)發(fā)布。s objectives is “risk”.所有類型和規(guī)模的組織都面臨內(nèi)部和外部因素的影響,使得它不能確定是否及何時(shí)實(shí)現(xiàn)其目標(biāo)。Throughout this process, they municate and consult with stakeholders and moni