This document is for use by people who create and protect value in organizations by managing risks, making decisions, setting and achieving objectives and improving performance.
This document provides guidelines on managing risk faced by organizations and can be used throughout the life of the organization and applied to any activity, including decision-making at all levels. This document provides a common approach to managing any type of risk and is not industry or sector specific and can be customized to any organization and its context. Principles, reference structure and process of this document allow to manage the risk in efficient, effective and consistent ways.