Standards are fine - unless they "bind"

The international standard for risk management, ISO 31000, provides principles and guidelines. When this standard is used as a heuristic device it can aid creative thinking. Heuristic devices can open up problems and opportunities however they are “double-edged swords” - something that can have both favourable or unfavourable consequences. The Standard is not a checklist. You cannot be certified against it. If it is applied in a narrow manner, instead of being a way of seeing it can become a way of not seeing. Putting you at risk. .