Our approach is based on the ISO Management standard and a “plan-docheck-act” model that considers a broad spectrum of stakeholders as well as risk exposures, both internal and external, to the organization.