1、ISO31000 風(fēng)險(xiǎn)管理標(biāo)準(zhǔn)中文版-翻譯（DOC 55頁(yè) ）ISO/FDIS31000Risk management Principles and guidelinesForeword 前言ISO （the International Organization for Standardization） is a worldwide f ederation of national standards bodies（ISO member bodies）. The work of pre paring International Standards is normally carried out

2、through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that com mittee. International organizations, governmental andnot-governmental, in liais on with ISO, also take part in the work. ISO col

3、laborates closely with theIn ternational Electrotechnical Commission （IEC） on all matters of electrotechnic al standardization.國(guó)際標(biāo)準(zhǔn)化組織（ISO）是各國(guó)標(biāo)準(zhǔn)化團(tuán)體（ISO成員團(tuán)體）組成的世界 性的聯(lián)合匯。制定國(guó)際標(biāo)準(zhǔn)工作通常由ISO的技術(shù)委員會(huì)完成。個(gè)成員團(tuán)體 若對(duì)某技術(shù)委員會(huì)確定的項(xiàng)目感愛好，均由權(quán)參加該委員會(huì)的工作。與ISO保持聯(lián)系的各國(guó)際組織（官方的或非官方的）也可參加有關(guān)工作。ISO與國(guó)際電工委員會(huì)（IEC）在電工技術(shù)標(biāo)準(zhǔn)化方面保持緊密合作的關(guān)系。Inte

4、rnational Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2.國(guó)際標(biāo)準(zhǔn)是按照ISO/IEC 導(dǎo)則第 2部分的規(guī)則起草的。The main task of technical committees is to prepare International Standa rds. Draft International Standards adopted by the technical committees are cir culated to the mem

5、ber bodies for voting. Publication as an International Stan dard requires approval by at least 75 % of the member bodies casting a vot e.由技術(shù)委員會(huì)通過的國(guó)際標(biāo)準(zhǔn)草案提交各成員團(tuán)體投票表決，需取得了至少 3/4參加表決的成員團(tuán)體的同意，國(guó)際標(biāo)準(zhǔn)草案才能作為國(guó)際標(biāo)準(zhǔn)證實(shí)公布。Attention is drawn to the possibility that some of the elements of this document may be the su

6、bject of patent rights. ISO shall not be held respons ible for identifying any or all such patent rights.本標(biāo)準(zhǔn)中的某些內(nèi)容有可能涉及一些專利權(quán)咨詢題，這一點(diǎn)應(yīng)引起注意，ISO 不負(fù)責(zé)識(shí)不任何如此的專利權(quán)咨詢題。ISO 31000 was prepared by the ISO Technical Management Board Wor king Group on risk management.ISO 31000由ISO技術(shù)治理委員會(huì)風(fēng)險(xiǎn)治理工作組編寫。Introduction 簡(jiǎn)介Or

7、ganizations of all types and sizes face internal and external factors an d influences that make it uncertain whether and when they will achieve their objectives. The effect this uncertainty has on an organization's objectives is “ risk” .所有類型和規(guī)模的組織都面臨內(nèi)部和外部因素的阻礙，使得它不能確定是否及何時(shí)實(shí)現(xiàn)其目標(biāo)。這種對(duì)一個(gè)組織的目標(biāo)阻礙的不確定

8、性既是“風(fēng)險(xiǎn)”。All activities of an organization involve risk. Organizations manage risk by identifying it, analysing it and then evaluating whether the risk should b e modified by risk treatment in order to satisfy their risk criteria.一個(gè)組織的所有活動(dòng)都涉及風(fēng)險(xiǎn)。組織通過識(shí)不、分析、 評(píng)判風(fēng)險(xiǎn)以及處理風(fēng)險(xiǎn)，以滿足他們的風(fēng)險(xiǎn)標(biāo)準(zhǔn)。Throughout this process

9、, they communicate and consult with stakeholder s and monitor and review the risk and the controls that are modifying the ri sk in order to ensure that no further risk treatment is required. This Internati onal Standard describes this systematic and logical process in detail.在那個(gè)過程中，他們與利益有關(guān)者溝通協(xié)商，監(jiān)測(cè)和審

10、查風(fēng)險(xiǎn)操縱，并持續(xù)的修正風(fēng)險(xiǎn)，以確保風(fēng)險(xiǎn)處理不再是必需的。本標(biāo)準(zhǔn)詳細(xì)描述了這一系統(tǒng)的和符合邏輯的過程。While all organizations manage risk to some degree, this International S tandard establishes a number of principles that need to be satisfied to make risk management effective. This International Standard recommends that orga nizations develop, impl

11、ement and continuously improve a framework whose purpose is to integrate the process for managing risk into the organization's overall governance, strategy and planning,management, reporting processes,p olicies, values and culture.盡管所有的組織在某種程度上都在治理風(fēng)險(xiǎn)，本標(biāo)準(zhǔn)規(guī)定了一些原則，以使風(fēng)險(xiǎn)治理變得有效。本標(biāo)準(zhǔn)建議，組織制定，實(shí)施和持續(xù)完善的框架，其

12、目的是將風(fēng)險(xiǎn)治理納入到組織的治理，戰(zhàn)略和規(guī)劃，治理，報(bào)告程序，政策，價(jià) 值觀和文化等綜合治理的整個(gè)過程。Risk management can be applied to an entire organization, at its many areas and levels, at any time, as well as to specific functions, projects and a ctivities.風(fēng)險(xiǎn)治理能夠應(yīng)用到整個(gè)組織，它的許多領(lǐng)域和層次，在任何時(shí)刻，以及具體職能，項(xiàng)目和活動(dòng)。Although the practice of risk management has

13、been developed over time and within many sectors in order to meet diverse needs, the adoption of co nsistent processeswithin a comprehensive framework can help to ensure that risk is managed effectively, efficiently and coherently across an organizatio n. The generic approach described in this Inter

14、national Standard provides the principles and guidelines for managing any form of risk in a systematic, tra nsparent and credible manner and within any scope and context.盡管在過去這段時(shí)刻內(nèi)的許多部門，以滿足不同的需要的風(fēng)險(xiǎn)治理的做法是成熟的，然而通過采納一致性流程的綜合框架有助于確保風(fēng)險(xiǎn)治理的有效性， 同時(shí)有效和連貫整個(gè)組織。在本標(biāo)準(zhǔn)規(guī)定的一樣性的原則和方針，目的在于在任何的環(huán)境和背景下，系統(tǒng)的、清晰的、可靠的方式治理風(fēng)險(xiǎn)。

15、Each specific sector or application of risk management brings with it in dividual needs, audiences, perceptions and criteria. Therefore, a key feature o f this International Standard is the inclusion of “ establishing the context” a s an activity at the start of this generic risk management process.

16、 Establishin g the context will capture the objectives of the organization, the environment in which it pursues those objectives, its stakeholders and the diversity of ri sk criteria - all of which will help reveal and assessthe nature and compl exity of its risks.每一個(gè)具體部門或風(fēng)險(xiǎn)治理的應(yīng)用都產(chǎn)生了獨(dú)自的需要，受眾， 觀念和標(biāo)準(zhǔn)。

17、因此，這一國(guó)際標(biāo)準(zhǔn)的要緊特點(diǎn)是將風(fēng)險(xiǎn)治理“環(huán)境建設(shè)”列入其治理過程的開始活動(dòng)。環(huán)境建設(shè)方面將捕捉該組織的目標(biāo)，它所追求目標(biāo)的環(huán)境，它的利益有關(guān)者和風(fēng)險(xiǎn)標(biāo)準(zhǔn)的多樣性，所有這些都將關(guān)心揭示和評(píng)估風(fēng)險(xiǎn)的性質(zhì)和復(fù)雜性。The relationship between the principles for managing risk, the framewor k in which it occurs and the risk management process described in this Inte rnational Standard are shown in Figure 1.本標(biāo)準(zhǔn)描述了

18、風(fēng)險(xiǎn)治理的原則、框架、 風(fēng)險(xiǎn)治理的流程之間的關(guān)系，如圖1 所示。When implemented and maintained in accordance with this International Standard, the management of risk enables an organization to, for example:當(dāng)按照這一國(guó)際標(biāo)準(zhǔn)實(shí)施和愛護(hù)時(shí)，風(fēng)險(xiǎn)的治理者需使一個(gè)組織加大，例如：? increase the likelihood of achieving objectives; 增加實(shí)現(xiàn)目標(biāo)的可能性? encourage proactive manageme

19、nt; 鼓舞主動(dòng)性治理;? be aware of the need to identify and treat risk throughout the organi zation; 在組織中，意識(shí)到識(shí)不和對(duì)待風(fēng)險(xiǎn)的需要;? improve the identification of opportunities and threats; 提升的機(jī)會(huì)和威逼識(shí)不能力? comply with relevant legal and regulatory requirements and internatio nal norms; 符合有關(guān)法律及監(jiān)管要求和國(guó)際規(guī)范? improve financial

20、 reporting; 改進(jìn)財(cái)務(wù)報(bào)告? improve governance; 改善治理? improve stakeholder confidence and trust; 提升利益有關(guān)者的信心和信任? establish a reliable basis for decision making and planning; 建立決策和規(guī)劃提供可靠的根基? improve controls;力口大操縱? effectively allocate and use resources for risk treatment; 有效地分配和使用資源處理風(fēng)險(xiǎn)? improve operational e

21、ffectiveness and efficiency; 提升運(yùn)營(yíng)的成效和效率? enhance health and safety performance, as well as environmental pro tection; 加大健康和安全業(yè)績(jī)，以及環(huán)境的愛護(hù);? improve loss prevention and incident management; 改善防損和事件治理? minimize losses; 減少缺失? improve organizational learning; and 提升組織的學(xué)習(xí)能力? improve organizational resilien

22、ce. 提升組織的應(yīng)變能力This International Standard is intended to meet the needs of a wide range of stakeholders, including: 本標(biāo)準(zhǔn)是為了滿足寬敞利益有關(guān)者需要，包括：a) those responsible for developing risk management policy within their organization;a)開發(fā)者對(duì)其機(jī)構(gòu)內(nèi)的風(fēng)險(xiǎn)治理政策負(fù)責(zé)；b) those accountable for ensuring that risk is effectively

23、managed within the organization as a whole or within a specific area, project or activity;b)有人對(duì)組織作為一個(gè)整體、或者某一特定范疇、項(xiàng)目或者活動(dòng)的風(fēng)險(xiǎn) 治理的有效性負(fù)責(zé);c) those who need to evaluate an organization effectiveness in managing risk; andc)有人需要對(duì)風(fēng)險(xiǎn)治理評(píng)估的有效性負(fù)責(zé)；和d) developers of standards, guides, procedures and codes of practi

24、ce tha t, in whole or in part, set out how risk is to be managed within the specifi c context of these documents.d)標(biāo)準(zhǔn)，指南，程序和守則的開發(fā)者，應(yīng)該對(duì)在特定的環(huán)境下風(fēng)險(xiǎn)治理 整體的或部分的文件得以實(shí)施負(fù)責(zé)；The current management practices and processes of many organizations i nclude components of risk management, and many organizations have a

25、lready adopted a formal risk management process for particular types of risk or ci rcumstances. In such cases, an organization can decide to carry out a critical review of its existing practices and processesin the light of this Internation al Standard.目前許多組織的治理實(shí)踐和流程包括風(fēng)險(xiǎn)治理的組成部分，同時(shí)許多組織對(duì)專門類型的風(fēng)險(xiǎn)或環(huán)境下差不多

26、采納了正式的風(fēng)險(xiǎn)治理流程。在這種情形 下，組織能夠在本標(biāo)準(zhǔn)下開展對(duì)其現(xiàn)有的做法和程序嚴(yán)格審查。In this International Standard, the expressions “ risk managemen” t and “ managing risk” are both used. In general terms, “ risk managemen”t ref ers to the architecture (principles, framework and process) for managing risks effectively, while “ managing

27、 risk” refers to applying that architecture to p articular risks.在本國(guó)際標(biāo)準(zhǔn)中，“風(fēng)險(xiǎn)治理”和“治理風(fēng)險(xiǎn)”同時(shí)使用。一樣來講，“風(fēng) 險(xiǎn)治理”是指治理風(fēng)險(xiǎn)的有效性架構(gòu)（原則，框架和流程），而“治理風(fēng)險(xiǎn)” 是指運(yùn)用該架構(gòu)治理特定風(fēng)險(xiǎn)。a) Creates' valueb) Integral part &t Organkzatioma) processesMandatamudcommitment *4-21Part of <d«ciiii0n makingd) Explicitly addresses

28、uncertainty&l SystomaUe. filruclured and timelyf Bas«di on th« best available informal iong Tal* lore dhj Tak+事 liu«Ti>hi 力力4 cunurvl hKtm i nto accounli) Tran4par-Hnt Hind iinczlur整Imj) lDynnim4Cu itoratliva and rqisponsivQi t。*h 口k，PaGilitates continuall imprnvemeil and eriha

29、ncoriierit of the arganizDtionPrinciples for mnngingrisk(Clauso 3)Framework for managingrisk(Clau» 4)Ri»k awe。喋零wet(S4JEstnbliBhirkg 1th« context (53)CM6) 84 號(hào)HC8ME £9= uenEUJOuRlik Identiflcalion (5.4.2) 4Ri主k 總r18aliys話(5_4-3)卜Riisk tranimont (5 5)*-Risk evaluation(544)Precess

30、fewr managing risk(Glause 5)Figure 1 Relationships between the risk management principles, framework and processRisk management Principles and guidelines風(fēng)險(xiǎn)治理-原則和指導(dǎo)方針1 Scope范疇This International Standard provides principles and generic guidelines on risk management.本標(biāo)準(zhǔn)提供了風(fēng)險(xiǎn)治理的原則和一樣準(zhǔn)則。This Internationa

31、l Standard can be used by any public, private or comm unity enterprise, association, group or individual. Therefore, this InternationalStandard is not specific to any industry or sector.本標(biāo)準(zhǔn)可用于任何公共，私人或社區(qū)組織，協(xié)會(huì)，團(tuán)體或個(gè)體。因此，那 個(gè)國(guó)際標(biāo)準(zhǔn)是不針對(duì)專門行業(yè)或部門。NOTE For convenience, all the different users of this Internatio

32、nal Stan dard are referred to by the general term “ organization” .為方便起見，本國(guó)際標(biāo)準(zhǔn)提到的所有不同的用戶通用術(shù)語(yǔ)為“組織”。This International Standard can be applied throughout the life of an org anization, and to a wide range of activities, including strategies and decision s, operations, processes,functions, projects, pro

33、ducts, services and assets.本標(biāo)準(zhǔn)可用于整個(gè)組織生活及各種活動(dòng)，包括戰(zhàn)略和決策，運(yùn)營(yíng)，流程， 職能，范疇廣泛的項(xiàng)目，產(chǎn)品，服務(wù)和資產(chǎn)。This International Standard can be applied to any type of risk, whatever its nature, whether having positive or negative consequences.本標(biāo)準(zhǔn)能夠適用于任何類型的風(fēng)險(xiǎn)，不管其性質(zhì)是否有主動(dòng)或消極的后 果。Although this International Standard provides generi

34、c guidelines, it is no t intended to promote uniformity of risk management across organizations. T he design and implementation of risk management plans and frameworks wil l need to take into account the varying needs of a specific organization, its particular objectives,context, structure, operatio

35、ns, processes,functions, project s, products, services, or assets and specific practices employed.盡管本國(guó)際標(biāo)準(zhǔn)提供了風(fēng)險(xiǎn)治理的一樣準(zhǔn)則，但不是為了促進(jìn)各組織風(fēng)險(xiǎn)治理的統(tǒng)一性。設(shè)計(jì)和風(fēng)險(xiǎn)治理打算和框架的實(shí)施需要考慮到特定組織的不同需要，具體做法受其特定的目標(biāo)，環(huán)境，結(jié)構(gòu)，業(yè)務(wù)，流程，功能，項(xiàng)目，產(chǎn)品，服務(wù)或資產(chǎn)等阻礙。It is intended that this International Standard be utilized to harmonize ri sk management p

36、rocessesin existing and future standards. It provides a com mon approach in support of standards dealing with specific risks and/or sect ors, and does not replace those standards.本國(guó)際標(biāo)準(zhǔn)目的是用來和諧風(fēng)險(xiǎn)治理與現(xiàn)有的和以后的標(biāo)準(zhǔn)之間的流程。它提供了一個(gè)支持處理特定風(fēng)險(xiǎn)和/或部分風(fēng)險(xiǎn)的通用方法，而不是取代這些標(biāo)準(zhǔn)。This International Standard is not intended for the

37、purpose of certificatio n.本標(biāo)準(zhǔn)不適合認(rèn)證目的。2 Terms and definitions 術(shù)語(yǔ)和定義For the purposes of this document, the following terms and definitions apply.下列術(shù)語(yǔ)和定義適用本文件。2.1 risk 風(fēng)險(xiǎn)effect of uncertainty on objectives不確定性對(duì)目標(biāo)的阻礙NOTE 1 An effect is a deviation from the expected positive and/or negative.注 1：阻礙是與預(yù)期的偏差

38、主動(dòng)和/或消極NOTE 2 Objectives can have different aspects (such as financial, health and safety, and environmental goals) and can apply at different levels (such as strategic, organization-wide, project, product and process).注 2：目標(biāo)能夠有不同方面(如財(cái)務(wù)，健康和安全，以及環(huán)境目標(biāo))，能夠體現(xiàn)在不同的層次(如戰(zhàn)略，組織范疇，項(xiàng)目，產(chǎn)品和流程)。NOTE 3 Risk is ofte

39、n characterized by reference to potential events (2. 19) and consequences(2.20), or a combination of these.注 3： 風(fēng)險(xiǎn)通常被描述為潛在事件( 2.19) 和后果 ( 2.20) ， 或它們的組合。NOTE 4 Risk is often expressed in terms of a combination of the cons equences of an event (including changes in circumstances) and the associated l

40、ikelihood (2.21) of occurrence.注 4：風(fēng)險(xiǎn)往往表達(dá)了對(duì)事件后果(包括環(huán)境的變化)和有關(guān)的可能性概率(2.21) 。NOTE 5 Uncertainty is the state, even partial, of deficiency of informat ion related to, understanding or knowledge of an event, its consequence,or l ikelihood.ISO Guide 73:2009, definition 1.12.2 risk management風(fēng)險(xiǎn)治理coordinated

41、 activities to direct and control an organization with regard t o risk (2.1)一個(gè)組織對(duì)風(fēng)險(xiǎn)的指揮和操縱的一系列和諧活動(dòng)ISO Guide 73:2009, definition 2.12.3 risk management framework 風(fēng)險(xiǎn)治理框架set of components that provide the foundations and organizational arrang ements for designing, implementing,monitoring (2.30), reviewi

42、ng and continua lly improving risk management (2.2) throughout the organization組織對(duì)風(fēng)險(xiǎn)治理的設(shè)計(jì)、實(shí)施、 監(jiān)控、 檢查和連續(xù)改進(jìn)等進(jìn)行的一系列基礎(chǔ)的組織安排NOTE 1 The foundations include the policy, objectives, mandate and co mmitment to manage risk (2.1).基礎(chǔ)包括治理風(fēng)險(xiǎn)的政策、目標(biāo)、任務(wù)和承諾NOTE 2 The organizational arrangementsinclude plans, relation

43、ships, ac countabilities, resources, processesand activities.組織安排包括打算、關(guān)系、職 責(zé)、資源、流程和活動(dòng)NOTE 3 The risk management framework is embedded within the organ ization's overall strategic and operational policies and practices 風(fēng)險(xiǎn)治理框架 被植入到組織的整個(gè)戰(zhàn)略和運(yùn)營(yíng)的戰(zhàn)略和實(shí)踐中ISO Guide 73:2009, definition 2.1.12.4 risk manage

44、ment policy 風(fēng)險(xiǎn)治理政策statement of the overall intentions and direction of an organization relate d to risk management (2.2) 一個(gè)組織對(duì)風(fēng)險(xiǎn)治理的意圖和指導(dǎo)方向的陳述ISO Guide 73:2009, definition 2.1.22.5 risk attitude 風(fēng)險(xiǎn)態(tài)度organization's approach to assessand eventually pursue, retain, take or t urn away from risk (2.1)

45、組織評(píng)估、追求、保留、采取或躲開風(fēng)險(xiǎn)的處理手段ISO Guide 73:2009, definition 3.7.1.12.6 risk appetite風(fēng)險(xiǎn)偏好amount and type of risk (2.1) that an organization is prepared to pursu e, retain or take一個(gè)組織追求、保留或采取風(fēng)險(xiǎn)的數(shù)量和類型ISO Guide 73:2009, definition 3.7.1.22.7 risk aversion 風(fēng)險(xiǎn)規(guī)避attitude to turn away from risk (2.1)躲開風(fēng)險(xiǎn)的態(tài)度ISO Gui

46、de 73:2009, definition 3.7.1.42.8 risk management plan 風(fēng)險(xiǎn)治理打算scheme within the risk management framework (2.3) specifying the appr oach, the management components and resources to be applied to the manag ement of risk (2.1)為風(fēng)險(xiǎn)治理框架方案指定方法、治理措施、資源以用于治理風(fēng)險(xiǎn)NOTE 1 Management components typically include pr

47、ocedures, practice s, assignment of responsibilities, sequence and timing of activities.治理措施 一樣包括程序、做法、職責(zé)分配、序列和及時(shí)的行動(dòng)NOTE 2 The risk management plan can be applied to a particular prod uct, process and project, and part or whole of the organization.風(fēng)險(xiǎn)治理打算 適用于特定的產(chǎn)品、流程和項(xiàng)目、部分或整個(gè)組織ISO Guide 73:2009, defi

48、nition 2.1.32.9 risk owner 風(fēng)險(xiǎn)所有者person or entity with the accountability and authority to manage the ris k (2.1)對(duì)風(fēng)險(xiǎn)治理持有權(quán)力和責(zé)任的個(gè)人或?qū)嶓wISO Guide 73:2009, definition 3.5.1.42.10 risk management process風(fēng)險(xiǎn)治理流程systematic application of management policies, procedures and practices to the activities of commun

49、icating,consulting, establishing the context, and id entifying, analyzing, evaluating, treating, monitoring (2.30) and reviewing risk (2.1)系統(tǒng)的應(yīng)用治理政策，程序和溝通協(xié)商，在建立的風(fēng)險(xiǎn)治理環(huán)境下，識(shí)不，分析，評(píng)判，處理，監(jiān)測(cè)和審查風(fēng)險(xiǎn)ISO Guide 73:2009, definition 3.12.11 establishing the context 環(huán)境建設(shè)defining the external and internal parameters

50、 to be taken into account w hen managing risk, and setting the scope and risk criteria (2.24) for the risk management policy (2.4)界定風(fēng)險(xiǎn)治理應(yīng)該考慮的外部和內(nèi)部參數(shù)，并設(shè)置風(fēng)險(xiǎn)治理政策的范疇和風(fēng)險(xiǎn)的標(biāo)準(zhǔn)ISO Guide 73:2009, definition 3.3.12.12 external context 外部環(huán)境external environment in which the organization seeks to achieve its obje

51、 ctivesNOTE External context can include:外部環(huán)境包括? the cultural, social, political, legal, regulatory, financial, technological, economic, natural and competitive environment,whether international, nationa l, regional or local;文化、社會(huì)、政治、法律、監(jiān)管、財(cái)政金融、技術(shù)、經(jīng)濟(jì)、 自然和競(jìng)爭(zhēng)環(huán)境，不管是國(guó)際，國(guó)家，區(qū)域或地點(diǎn)? key drivers and trends h

52、aving impact on the objectives of the organi zation; and阻礙該組織的要緊驅(qū)動(dòng)和趨勢(shì)? relationships with, and perceptions and values of, external stakeholde rs (2.15).與外部利益有關(guān)者之間的關(guān)系和價(jià)值觀ISO Guide 73:2009, definition 3.3.1.12.131 nternal context 內(nèi)部環(huán)境internal environment in which the organization seeks to achieve its

53、obje ctivesNOTE Internal context can include:內(nèi)部環(huán)境包括? governance, organizational structure, roles and accountabilities;治理、組織結(jié)構(gòu)、角色和責(zé)任? policies, objectives, and the strategies that are in place to achieve th em;政策、目標(biāo)、實(shí)現(xiàn)目標(biāo)的戰(zhàn)略? the capabilities, understood in terms of resources and knowledge (e.g. capit

54、al, time, people, processes,systems and technologies);能力、資源和知識(shí)(如資本、時(shí)刻、人、流程、系統(tǒng)和技術(shù))? perceptions and values of internal stakeholders內(nèi)部禾1J益有關(guān)者的價(jià) 值觀? information systems, information flows and decision-making processes (both formal and informal); 信息系統(tǒng)、信息流和(正式的和非正式的)決策流程? relationships with, and percepti

55、ons and values of, internal stakeholder s;內(nèi)部利益有關(guān)者價(jià)值觀之間的關(guān)系? the organization's culture;組織文化? standards, guidelines and models adopted by the organization; and 標(biāo) 準(zhǔn)、指引和組織采納的模式? form and extent of contractual relationships.合同關(guān)系的形成和范疇I(yíng)SO Guide 73:2009, definition 3.3.1.22.132 ommunication and consult

56、ation 溝通和協(xié)商continual and iterative processes that an organization conducts to provid e, share or obtain information and to engage in dialogue with stakeholders (2.15) and others regarding the management of risk (2.1)一個(gè)組織提供，共享或獵取信息，與利益有關(guān)者和其他風(fēng)險(xiǎn)治理者連續(xù)和反復(fù)對(duì)話的流程N(yùn)OTE 1 The information can relate to the exis

57、tence, nature, form, likeli hood (2.21), severity, evaluation, acceptability,treatment or other aspects of th e management of risk.信息涉及存在、性質(zhì)、形式、可能性、嚴(yán)峻程度、評(píng)判、 可同意性、處理或者其他與治理風(fēng)險(xiǎn)有關(guān)的方面NOTE 2 Consultation is a two-way process of informed communication between an organization and its stakeholders or others

58、on an issue prior to making a decision or determining a direction on a particular issue. Consultati on is:協(xié)商是一個(gè)組織與它的利益有關(guān)者或其他利益有關(guān)者雙向溝通的過程，目的在于就以咨詢題提早做出決策或就某一咨詢題決定方向。協(xié)商是：? a process which impacts on a decision through influence rather than power; and通過阻礙而非權(quán)力阻礙決策的過程? an input to decision making, not joint deci