This document provides guidelines on managing risk faced by organizations. The application of these guidelines can be customized to any organization and its context. This document provides a common approach to managing any type of risk and is not industry- or sector-specific. This document can be used throughout the life of the organization and can be applied to any activity, including decision-making at all levels.