ISO 31000 describes a maturity model assurance approach to risk management. An essential element of this approach is The customization component of the risk management framework. Improvement of risk management processes with time. The monitoring and review element of the risk management process. An emphasis on human and cultural factors