ISO 31000:2018 — Risk management — Guidelines
ISO 31000:2018 — Risk management — Guidelines — 35% of in-scope requirements covered.
5 requirements · 5 in scope (2 designed · 3 advisory). The 35% is weighted over the in-scope base.
ISO 31000:2018: requirement → the KYE™ artefact that enforces it
Demo dataYou learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.
-
2 · designed
Leadership and commitment — accountability and authority for risk
Constitution: 12 purpose permission, 36 governedui
-
6 · designed
Monitoring and review — contestable outcomes
Constitution: 21 delegated auditability
-
2 · advisory
Risk identification — surfacing AI-authority risk
Constitution: 13 resilience loop · Audit events: kye.evidence.decision_map.v1
-
2 · advisory
Risk treatment — admissibility decision at the moment of action
Constitution: 12 purpose permission · Audit events: kye.evidence.decision_map.v1
-
7 · advisory
Recording and reporting — replay-derivable evidence
Constitution: 13 resilience loop · Audit events: kye.evidence.pack.v1, kye.replay.proof.v1
How this widget is built
- Demonstrates
- KYE™ Compliance Mapping Rail™
- Components
- Framework requirement (clause)
- Coverage status
- KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
- Flow
- Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
- Used on
- /compliance/iso-31000/: On every framework page, after its opening.
Source: ISO 31000:2018 (Risk management — Guidelines): the principles (Clause 4), framework (Clause 5), and process (Clause 6). KYE Protocol™ governs the AUTHORITY, EVIDENCE and FINALITY of AI-agent actions as a risk-treatment and risk-recording control inside an organisation's ISO 31000 risk-management process — KYE™ does not run the enterprise risk-management system itself. Starter requirement set; deepen by graft through the §70 rail. · License: ISO — standard text is copyrighted; KYE™ registry paraphrases each clause's intent and cites the official clause identifier for mapping purposes only.
By category
| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
|---|---|---|---|---|---|---|
| Clause 5 — Framework | 1 | 0 | 1 | 0 | 0 | 50% |
| Clause 6 — Process | 4 | 0 | 1 | 3 | 0 | 31% |
Every requirement → the KYE™ artefact that enforces it
| ID | Title | Status | KYE™ enforcement |
|---|---|---|---|
iso-31000.5.4.2 | Leadership and commitment — accountability and authority for risk | designed | constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/36-GOVERNEDUI.md |
iso-31000.6.4.2 | Risk identification — surfacing AI-authority risk | advisory | constitution_refs: constitution/13-RESILIENCE-LOOP.mdaudit_events: kye.evidence.decision_map.v1 |
iso-31000.6.5.2 | Risk treatment — admissibility decision at the moment of action | advisory | constitution_refs: constitution/12-PURPOSE-PERMISSION.mdaudit_events: kye.evidence.decision_map.v1 |
iso-31000.6.6 | Monitoring and review — contestable outcomes | designed | constitution_refs: constitution/21-DELEGATED-AUDITABILITY.md |
iso-31000.6.7 | Recording and reporting — replay-derivable evidence | advisory | constitution_refs: constitution/13-RESILIENCE-LOOP.mdaudit_events: kye.evidence.pack.v1, kye.replay.proof.v1 |
Canonical KYE™ surfaces referenced on this page: KYE Protocol™ · Systemic Authority Risk™.