IMPLEMENTING A RISK MANAGEMENT STANDARD

After risk management “conquered” more and more project managers’ minds and showed its benefits for business and programs, the need to have a global risk management standard has become a crucial issue in the world of risk management. But having a global risk management standard has been a big challenge, starting from the decision of developing the standard (March-June 2005), to the moment of publishing it, November 2009. So, developing the ISO 31000:2009 standard has been more or less like a bumpy ride. Apparently, the people involved in developing the global risk management standard understood from the very beginning that no challenges are too big, nor any tasks too small and that the task of having a new, comprehensive global risk management standard should be completed with excellence: defining the principles and the framework guiding the risk management process applicable for all type of organizations and for a wide range of activities. Coming up with a global standard should always be based on the real organizations’ needs and should fulfill real risk management requirements. The article is trying to present the pros and cons of risk management standard implementation, challenging the implementation process itself and the added value of implementing the standard due to the lack of implementation enablers, like risk culture, a real problem especially in an international environment.