The fundamental concept of ‘risk’ will remain the same
and organisations must continue to assess the likelihood
and consequences of a particular hazard. The major
change here is the need to understand ‘risk’ in the wider
context of the management system, for example, those
tasks that are outsourced.