This International Standard provides principles and general implementation guidance for risk management. This standard applies to organizations of all types and sizes, to the entire life cycle of the organization and its stages, and to various activities of the organization, including process management, functional behavior, project management, and relationships with products, services, assets, Activities related to operation and decision-making. This standard provides general guidance for implementing risk management, but the specific implementation of risk management depends on the actual needs and specific practices of the organization.