A.9 Recording and reporting

Clause A.9 of ISO 31000:2018 outlines the requirements for recording and reporting risk-management activities, emphasizing the need to maintain accurate, timely records of risk assessments, treatment plans, monitoring results and decisions. It guides organizations in creating transparent reports for internal and external stakeholders to support informed decision-making and continual improvement of the risk-management framework.