Globally there are three critical elements identified for successful risk management. For more info - https://www.ibexsystems.net/management-consulting/iso-31000/