Abstract
The main purposes of risk management are to create and protect value, improve performance, promote innovation and contribute to the achievement of objectives. This involves the systematic application of policies, procedures and practices to the activities of communication and consultation, establishment of the context and evaluation, treatment, follow-up, review, recording and reporting of risks.
A risk is considered as an event that has the capacity to affect or deviate from the objectives that have been set, therefore, it should be considered that every risk has, associated to it, a technical, strategic, operational justification, or any other reason that justifies it.
The risk management process must be an integral part of decision making and must be integrated into the structure, the technical operations, the management system procedures and the processes from the strategic and operational level either at the program or project level.
This document defines the systematic approach to risk management regarding the assessment bodies through the identification, analysis and quantification of risk probabilities and impacts, as well as secondary and consequential effects.

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.


