According to the ISO 31000 standard, risk management is a management task in which the risks of an organization are identified, analyzed and later assessed.
All company risks as well as incidents that have occured are documented according to the requirements: