6.2 Risk management objectives and planning to achieve them

ISO 31000:2018 clause 6.2 defines how an organization should set risk-management objectives that reflect its context, strategy and stakeholder expectations, and then design and integrate plans, resources and processes to achieve those objectives while monitoring performance.