Risk registers, assessment criteria and ownership are arranged into a clear process.
ISO 37001
ISO 22301
ISO 13485