Securing assets and preparing for undesirable and disruptive events in organizations and their supply chains is a critical part of building resilient, sustainable organizations. Organizations need to seamlessly integrate risk, security, crisis, and continuity management into their overall business management strategies. International and national standards can help, but is the proliferation of standards helping or confusing a coherent approach to managing the risks of disruptive events? The International Organization for Standardization (ISO) 31000 standard for risk management provides a framework for building a system of management to address intentional, unintentional, and natural events. This helps the organization to become better prepared to address whatever uncertainty it may face. Key to success is building a comprehensive approach to managing risk that cuts across discipline and organizational silos. By integrating an ISO 31000-based approach for risk management into a formal management system, an organization can custom-build a system of management in conformance with a range of ISO management system standards. The integrated approach allows the organization to leverage its resources and expertise to build a more resilient organization capable of better handling undesirable events. The approach focuses on achieving an organization's objectives by integrating risk, security, crisis, and continuity management into day-to-day operations using an objectives-based approach. It drives a cultural change in the organization emphasizing that everyone has a role to play in managing risk. Inclusion and training in the risk management processes empowers people working for the organization to proactively identify and manage risks. ISO 31000 supports a paradigm shift in perspective. No longer does risk management focus on bad events, rather the question to be answered is: How do I use risk management to open doors of opportunity and minimize uncertainty in achieving objectives?