Risk, Governance & Compliance
ISO 31000:2018 Risk Management – Lead Auditor
Overview
A professional programme for those who plan, lead and report management-system audits against ISO 31000:2018. It follows the audit principles of ISO 19011 and covers the full audit cycle — from planning and opening meeting to findings, nonconformity grading, reporting and follow-up — through realistic case work and role play.
The standard
About the standard
ISO 31000:2018
Risk Management
Sets out principles and a general process for identifying, weighing, treating and following up on the risks an organization faces, whatever its size or sector. It is written as guidance rather than a set of certifiable requirements, giving leaders and risk practitioners a shared vocabulary and structure they can adapt to their own context. The 2018 edition frames risk management primarily as a way of creating and protecting value rather than a purely defensive exercise.
Key objectives
- Give organizations a shared framework and vocabulary for managing risk
- Embed risk thinking into governance, strategy, planning and everyday decisions
- Improve early identification of both threats and opportunities
- Support more efficient allocation of resources toward risk treatment
- Provide a benchmark organizations can use to audit their own risk practices
Who uses it
Leaders, risk owners, and professionals responsible for managing risk.
Contribution to the SDGs
Per ISO, ISO 31000 contributes to the following UN Sustainable Development Goals:
Learning outcomes
What you will be able to do
- Interpret the requirements of ISO 31000:2018 in an audit context
- Plan an audit programme and an individual audit, including scope, criteria and sampling
- Lead an audit team and conduct opening and closing meetings
- Collect and evaluate objective evidence through interview, observation and document review
- Grade nonconformities and write clear, defensible audit findings
- Prepare the audit report and follow up corrective actions
Who should attend
Auditors, consultants, management representatives and professionals who want to lead first-, second- or third-party audits.
More in Risk, Governance & Compliance
All Risk, Governance & ComplianceInternal AuditorABM-01Risk, Governance & Compliance
ISO 37001:2025 Anti-Bribery Management – Internal Auditor
Lead AuditorABM-02Risk, Governance & Compliance
ISO 37001:2025 Anti-Bribery Management – Lead Auditor
Lead ImplementerABM-03Risk, Governance & Compliance
ISO 37001:2025 Anti-Bribery Management – Lead Implementer
AXIOS · Certification body
Looking for management-system certification?
AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.