A.2 Scope, context and criteria

A.2 outlines the scope of the ISO 31000 risk-management system, defines the internal and external context in which risks are identified, and sets the criteria for assessing and treating those risks, establishing the boundaries and benchmarks that guide the organization's risk-based decisions.