Risk Management Process

The Risk Management Procedure in IRBM is a structured and systematic process for identifying, analysing, evaluating and treating risks arising from internal and external contexts that may impact the achievement of organisational objectives and stakeholder expectations.

This procedure is adopted by IRBM to support the implementation and compliance of the following management systems, as defined in the IRBM Integrated Management System Manual (MSPB HASiL):

1. Quality Management System (QMS) in accordance with MS ISO 9001:2015
2. Anti-Bribery Management System (ABMS) in accordance with MS ISO 37001:2025
3. Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022
4. Business Continuity Management System (BCMS) in accordance with ISO 22301:2019