The system is based on the steps in the ISO 31000 standard. It will go through the major steps: 



  • Establish context 



  • Identify Risks 



  • Evaluate and analyse 



  • Initiate mitigating action 



  • Establish residual risk