8.2 Risk assessment

Clause 8.2 of ISO 31000:2018 details the risk assessment step in the risk management framework. It requires organisations to identify potential events, analyse their likelihood and consequences, evaluate the level of risk, and record the findings to inform treatment decisions.