GB/T 27921-2023Risk management - Risk assessment techniques (English PDF)

National Standard of the People's Republic of China

ICS

03.100.01

Classification

A02

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

• Preface
• Introduction
• 1 Scope
• 2 Normative reference documents
• 3 Terms and Definitions
• 4 Core Concepts
• 4.1 Uncertainty
• 4.2 Risk
• 5 Use of risk assessment techniques
• 6 Implementation of risk assessment
• 6.1 Develop a risk assessment plan
• 6.1.1 Determine the purpose and scope of risk assessment
• 6.1.2 Understanding the background
• 6.1.3 Stakeholder participation
• 6.1.4 Determine goals
• 6.1.5 Consider people, organizational and social factors
• 6.1.6 Check Decision Criteria
• 6.2 Information management and model development
• 6.2.1 Overview
• 6.2.2 Collecting information
• 6.2.3 Analyzing data
• 6.2.4 Developing and applying models
• 6.3 Application of risk assessment techniques
• 6.3.1 Overview
• 6.3.2 Identify risks
• 6.3.3 Identify sources, causes and drivers of risk
• 6.3.4 Investigate the effectiveness of existing controls
• 6.3.5 Understand consequences and possibilities
• 6.3.6 Analyze interdependencies and dependencies
• 6.3.7 Understanding risk metrics
• 6.4 Check analysis results
• 6.4.1 Verification and validation of analytical results
• 6.4.2 Uncertainty and sensitivity analysis
• 6.4.3 Supervision and inspection
• 6.5 Use assessment results to support decision-making
• 6.5.1 Overview
• 6.5.2 Decisions on risk significance
• 6.5.3 Choice of options decisions
• 6.6 Record and report the risk assessment process and results
• 7 Choosing risk assessment techniques
• 7.1 Overview
• 7.2 Select technology
• Appendix A (Informative) Technical Classification
• Appendix B (Informative) Technical Note