ISO 31000 is built on 11 guiding principles.

Risk management can create value

Risk Management should take into account company culture

Risk Management should address uncertainty faced by the organisation

Risk Management should be done annually

Risk Management should include only the Departments affected by risk