Risk is both a threat and an opportunity — ISO 31000 provides a structured approach to managing it effectively.