Decision guide
ISO 31000 in the UK: guidance, training and certification
Separate the risk-management framework, an individual credential and an organisational assurance claim.
Can a UK organisation be certified to ISO 31000?
ISO 31000 provides guidelines, not requirements for organisational certification. A review can evaluate an agreed approach against the guidance, but should not be presented as an ISO 31000 organisational certificate.
Can an individual earn a credential?
PECB offers individual Foundation, Risk Manager and Lead Risk Manager learning routes. Their examinations and credential requirements belong to the individual certification scheme; they do not change the status of ISO 31000 as guidance.
What should you ask a risk consultant to deliver?
Ask for a defined review boundary, the decisions the risk process supports, criteria, ownership and treatment follow-up. A useful output explains assumptions and uncertainty. A longer register is not automatically a better risk-management process.
Which route fits your requirement?
Choose a course for your own knowledge and exam preparation. Choose an organisational review when you need support evaluating how risk is managed in the business. If a customer asks for “ISO 31000 certification”, clarify the evidence they actually want before buying either.
Primary reference: ISO risk management guidance