> A Risk (Management) Policy is "a plan for action of how to manage risk"
> - [[Society for Risk Analysis Glossary|Society for Risk Analysis Glossary, 3.6]]
## Template
Download this Risk Management Policy Template from RISK ACADEMY ([Download](https://risk-academy.ru/download/risk-management-policy-detailed/))
**Table of Contents**
1. Purpose
2. Scope
3. Policy Statement (Adapted from [[ISO 31000 - Risk Management - Guidelines|ISO 31000]])
1. Integrated
2. Structured and Comprehensive
3. Customized
4. Inclusive
5. Dynamic
6. Best available information
7. Human and cultural factors
8. Continual improvement
4. Procedure (Adapted from [[ISO 31000 - Risk Management - Guidelines|ISO 31000]])
1. Communication and Consultation
2. Scope, Context and Criteria
3. Risk Assessment
4. Risk Treatment
5. Monitoring and Review
6. Recording and Reporting
5. Roles and Responsibilities
1. Board / Chairmen
2. CEO
3. Party responsible for risk management implementation
4. Department Heads
6. Definitions (Adapted from [[ISO 31000 - Risk Management - Guidelines|ISO 31000]])
7. References
8. Document History