ISO 31000 provides principles and generic guidelines on risk management.It is not specific to any industry or sector.It can be used by any public, private or community enterprise, association, group or individual and can be applied throughout the life of an organization, and to a wide range of activities, including strategies and decisions, operations, processes, functions, projects, products, services and assets.