According to the ISO 31000 standard, risk management is a management task in which the risks of an organization are identified, analyzed and later evaluated. All corporate risks already identified are documented together with any incidents: All risks All incidents