Standard represents leading practices from 250 global security and risk management professionals and provides a framework for robust risk assessment programs
Alexandria, Va. – ASIS International (ASIS) and RIMS, the risk management society™, jointly announce the release of the new ASIS/RIMS Risk Assessment ANSI Standard. This Standard provides guidance on developing and sustaining a coherent and effective risk assessment program. ASIS, the leading organization for security professionals worldwide, is an ANSI Accredited Standards Developer. RIMS, the leader in education, engagement and advocacy for the global risk management community, is also an ANSI Accredited Standards Developer.
For executives around the globe, managing risk effectively has become a more complex and critical responsibility. In a global economy, organizations look upon their risk and security practitioners as essential facilitators for achieving successful business results. The new ASIS/RIMS Risk Assessment Standard provides a framework and process for organizations to establish an ongoing program to evaluate risks and conduct individual risk assessments. The Standard complements the ISO 31000 risk management standard and the ISO 31010 standard cataloguing risk assessment methodologies by providing a blueprint for the risk assessment process. View the Executive Summary (PDF).
“Managing risk is about managing uncertainties in order to achieve strategic, tactical and operational objectives. This includes identifying opportunities, minimizing potential losses, and building a more resilient organization and supply chain. It is essential that decision-makers have accurate and dynamic information on uncertainties and their potential outcomes in order to help better assure their organizations thrive and survive,” stated ASIS Global Standard Initiative Commissioner Dr. Marc Siegel. “The ASIS/RIMS Risk Assessment Standard provides a blueprint for addressing enterprise-wide risk at all levels and regardless of the source.”
The standard presents a basis for a universal and integrated approach to risk management, including: building a risk assessment program; understanding the context for risk assessments; conducting a risk assessment, and using risk assessment outcomes for decision-making.
“In this standard, we focus on the primary value of risk assessments, which is informing responsible and accountable decision-makers as to what choices are available to effectively manage risk in achieving objectives,” said Carol Fox, RIMS Director, Strategic and Enterprise Risk Practice. “Therefore, we included guidance on types of risk assessments, understanding biases, and the competence of risk assessors.”
ASIS and RIMS members get one free download through their respective websites. Others are welcome to purchase the standard through either organization’s online stores.
Want to learn more about this Standard?
Conducting Risk Assessments Using the New American National Standard
Monday, November 2, 2015, 12:00-1:30 pm (ET)
A FREE webinar presentation.
# # #
ABOUT ASIS INTERNATIONAL:
ASIS International (ASIS) is the largest membership organization for security management professionals that crosses industry sectors, embracing every discipline along the security spectrum from operational to cybersecurity. Founded in 1955, ASIS is dedicated to increasing the effectiveness of security professionals at all levels.
Through hundreds of chapters across the globe, ASIS develops and delivers board certifications and industry standards, hosts networking opportunities, publishes the award-winning Security Management magazine, and offers educational programs, including the Annual Seminar and Exhibits—the security industry’s most influential event. Whether providing thought leadership through the CSO Roundtable for the industry’s most senior executives or advocating before business, government, or the media, ASIS is focused on advancing the profession, and ensuring that the security community has access to intelligence, resources, and technology needed within the business enterprise. www.asisonline.org
ASIS is an ANSI accredited Standards Development Organization and actively participates in the International Organization for Standardization, developing standards and guidelines within a voluntary, nonproprietary and consensus-based process, utilizing the knowledge, experience and expertise of ASIS membership, security professionals and the global security industry. View a complete list of all ASIS Standards and Guidelines currently under development.