ISO 31000 provides direction on how companies can integrate risk-based decision making into an organization's governance, planning, management, reporting, policies, values and culture. It is an open, principles-based system, meaning it enables organizations to apply the principles in the standard to the organizational context.Web