Özet:

Risk management is defined as activities aimed at identifying, assessing and reducing the risks undertakings may face. Corporate risk management is a risk management approach in which all the risks undertakings are identified, these risks are classified according to their importance and the activities that can be done against the risks are determined. There are different risk management models worldwide, but the most commonly used models include the ISO 31000 Corporate Risk Management model. In this study, the ISO 31000 Corporate Risk Management requirements were briefly introduced and the certification bodies authorized by the Professional Qualification Authority were evaluated according to the requirements of this standard. The possible risks in the examination and certification activities of the organizations have been identified, and for the purpose of evaluation of the risks, the Multi-Sample Decision Making Method of the Organization has been used the Multi-Sample Decision Making Method of the Organization (BDANP). With this method, the weight of the risks has been identified, the effects in the testing and certification activities will be calculated and the activities to be carried out according to the achieved results have been determined. As a result, a new risk management model has been designed for the purpose of assessing and managing risks.