ISO 31000 Risk Consultants South Africa

ISO 31000:2018 sets out the principles and guidelines for managing risk: the discipline behind the risk-based thinking that runs through ISO 9001, 14001 and 45001. It is guidance, not a certification: there is no ISO 31000 certificate. What there is, done properly, is a business that sees its risks coming and manages them on purpose.

We build a risk framework that fits how your business actually makes decisions (risk criteria, registers, ownership and review) and embed it so it informs objectives, audits and management review rather than sitting in a spreadsheet. The starting point is a risk review.

What we do

A risk-management framework and policy aligned to ISO 31000:2018 and your real decision-making.
Risk criteria and a single scoring method used consistently across the business.
Risk and opportunity registers with owners, controls and review cycles.
Risk linked to objectives, audits and management review so it drives action.
Training so your team can identify, assess and treat risk after we hand over.

Is this you?

Risk lives in people's heads

You manage risk informally and want a structured, defensible framework before something important is missed.

Your ISO system needs real risk-based thinking

Auditors expect risk genuinely driving decisions, not a token register opened once a year.

The board wants visibility

Leadership needs a clear, current view of the risks that matter and what is being done about them.

Frequently asked questions about ISO 31000

Can you get certified to ISO 31000?

No. ISO 31000 is a guidance standard, not a certifiable one, so there is genuinely no such thing as ISO 31000 certification. What we build is a real risk-management framework that strengthens your ISO 9001, 14001 or 45001 system and sharpens your decision-making.

How does ISO 31000 relate to ISO 9001 risk-based thinking?

ISO 9001, 14001 and 45001 all require risk-based thinking but do not tell you how to do it. ISO 31000 is the how: the framework and process. We build that discipline into your management system so the requirement is genuinely met.

What do we actually get?

A working risk framework: criteria, registers, ownership, review cycles and the link to objectives and audits, plus the training to keep it alive. Not a certificate; a capability.

Can iQuotient track our risks?

Yes. Our iQuotient platform maintains live risk registers, control reviews and overdue actions so risk stays visible to management between reviews.

How do we start?

With a risk review: we look at how you handle risk today and map a practical framework around it.

ISO 31000 risk management consultants in South Africa