List three core principles of ISO 31000.

1. Risk management should be integrated into the organization's overall governance, strategy, and planning processes.
2. Risk management should be systematic, structured, and timely.
3. Risk management should be based on the best available information and should be tailored to the organization's specific needs and context.

1. Risk Management is an integral part of organizational processes: Risk management is not just a separate function, but rather an essential part of all organizational activities. It should be integrated into the way the organization plans, makes decisions, and operates.
2. Risk Management is a continuous process: Risk management is not a one-time event, but an ongoing process that should be constantly updated and revised to reflect changes in the organization's environment and risks.
3. Emphasis on Proactive Risk Management: ISO 31000 encourages organizations to proactively identify and manage risks, rather than waiting for them to happen.