The Importance of Risk Management: What is Missing in ISO Standards?

Risk Analysis ◽  
2021 ◽  
Author(s):  
Svana Helen Björnsdóttir ◽  
Páll Jensson ◽  
Robert J. Boer ◽  
Saemundur E. Thorsteinsson
Author(s):  
Raphaël Gellert

The goal of this chapter is twofold. First, it provides a comprehensive overview of two key notions: risk and regulation. In the case of risk this includes the following. An explanation of risk and risk management, including an appraisal and description of the technical notion of risk as it appears in ISO Standards. It also provides for a discussion of some of the key methods for assessing and managing risks, including some of the main drawbacks and criticisms that have been raised against the use of risk management. In the case of regulation, it includes a more in-depth analysis of the notion, and of its constitutive elements; a discussion on the conflation between law and regulation; and a discussion on what exactly the object of regulation is. These discussions of key caveats pertaining to these two notions serve as the backbone of many of the analyses carried out in later chapters (e.g. understanding data protection in the light of the constitutive elements of regulation, discussing various methods for data protection risk management, etc). Second, beyond these caveats, this chapter also shows and contrasts how both risk and regulation can be analysed as a matter of two balancing exercises with associated safeguards, and hence, as variations around the proportionality principle. A grid at the end of the chapter summarises this, with reference to the European Convention on Human Rights proportionality test.


2017 ◽  
Vol 28 (4) ◽  
pp. 538-554 ◽  
Author(s):  
Guillermo Foladori

In the absence of government safety regulation in the field of nanotechnology, ISO standards are being used as the basis for establishing technical and management guidelines at an international level. There are more than 50 current ISO standards on nanotechnology. Some of these relate to the working environment and occupational risk management. In Latin America, entities that are members of ISO are enunciating national versions of the international standards. In this article, this context is analysed critically, starting from the Mexican standard on occupational risk management in the working environment. Even though risk management standards may guarantee better and safer working conditions, in the field of nanotechnology, they simultaneously unlock detrimental implications for workers and society. Reliance on such private and voluntary forms of industry self-regulation is identified as a by-product of global neoliberalism.


2017 ◽  
Vol 54 ◽  
pp. 176-185 ◽  
Author(s):  
Béatrix Barafort ◽  
Antoni-Lluís Mesquida ◽  
Antonia Mas

Author(s):  
Nitha Pricillia

The research is aiming at obtaining understanding and assurance whether the regulation of Indonesia Financial Services Authority (orOtoritas Jasa Keuangan/OJK) for banking industry on Governance, Risk Management, and Compliance (GRC) in Indonesia are compatible with the requirements and suggested practices of ISO 37000/DIS on Governance, ISO 31000:2018 Risk Management, and ISO 37301: Compliance Management as international standards for Governance, Risk, and Compliance (GRC). The regulatory requirements as set forth by Indonesian FSA to banking industry for integrated GRC have all been compatible with all the elements of ISO 37000, ISO 31000:2018, and ISO 37301. This study utilizes a comparative study method, which is conducted by assessing the similarities and differences between two standards or regulations, or in this study, between Indonesia Financial Services Authority Regulation, or Peraturan Otoritas Jasa Keuangan (POJK) on Governance, Risk Management and Compliance (GRC), with their ISO Standards counterparts. The result is expected to show the degree of fitness of Indonesian banking regulations with these ISO standards. There is only a very small number of studies have been done in the light of calibrating the Indonesian banking regulation in Governance, Risk Management and Compliance (GRC) with their ISO counterparts. Therefore, the result of this paper could be used as generic inputs and considerations for banks which have initiated their integrated GRC practices, and/or just recently commenced, and/or improving their practices more effectively. Whereas the study provides general understanding and assurance of the compatibility, it is not supported yet by empirical evidence of how banks practically exercise the implementation of integrated GRC based on ISO 37000, ISO 31000, and ISO 37301 and how do they conduct calibration efforts to its efficacy. Therefore, it is recommended to conduct such empirical case study in several banks in Indonesia as further study. Further, a field study such as interviews and surveys with Indonesian banking professionals could also be performed to provide additional perspectives on how integrated GRC is implemented in Indonesian banking.


2011 ◽  
Vol 26 (S1) ◽  
pp. s75-s75
Author(s):  
M.W. Hills

BackgroundEarly involvement by health services in the planning, preparation, operations and post-event analysis of mass gatherings provides one of the best opportunities to engage with other agencies and to develop a real sense of your agency's capabilities. The establishment of the new ISO Standards on Risk Management provide the best opportunity in a decade to structure this work in a manner that will develop true capacity to manage the multitude of risks health services face this century.DiscussionRather than ad hoc and sometimes conflicting approaches we now have the “lingua franca” on which to build our policy, capacity development, budgets and response. The evolution of risk management standards has seen the release of ISO 31000: 2009, Risk management - Principles and guidelines and ISO 31010: 2009, Risk management – Risk assessment techniques. Largely based on the earlier Australian Standard 4360 and work of the IEC these standards have the potential to embed critical aspects of the responsibilities of health agencies worldwide into a universal singular policy framework. Translating this into other areas of health agencies work includes communicable disease management and emergency management, in general, which will allow other agencies to understand the “health” perspective and vice versa.ConclusionsDrawing on personal experiences from mass gatherings since 1997, the author will demonstrate the utility of the ISO Standards as the framework for health emergency management including mass gatherings. Examples will include mass gatherings at the international level within the Asia- Pacific Region to the local level within Sydney, Australia from 1997 to 2010.


2020 ◽  
Vol 1 (22) ◽  
Author(s):  
Lazar Stojanovic ◽  
Ljubica Figun ◽  
Jelena Trivan

Dams and tailing storage facilities are specific mining facilities that carry many potential hazards, and therefore risks. In this paper, for tailing mud damMedjedja andtailing storage facilityof the Omarska Mine near Prijedor, on the basis of the current state of the dam, past events, visual observations and specialist measurements, we have analysed possible accident scenarios, the likelihood of their occurrence, and their detrimental effects, including: loss of life, material damage, environmental consequences and impact on the reputation of the Company. The ISO standards and ICOLD recommendations related to dam risk management were used in the risk assessment.


Sign in / Sign up

Export Citation Format

Share Document