ISO 31000:2018 currently has a tactical and process focus.

The ISO 31000:2018 standard provides a framework for risk management, with a focus on the strategic and integrated aspects of risk management. It outlines principles, a framework, and a process for managing risk in organizations of all kinds. The focus of the standard is on aligningrisk management with the organization’s context, objectives, and strategy, and on integrating risk management into all aspects of an organization’s governance, culture, and performance.