Which of the following pairs are commonly used frameworks for risk assessment?

• A. LEED and GRI frameworks
• B. PRINCE2 and PMBOK
• C. SWOT and PESTLE
• D. ISO 31000 and HSE risk assessment checklists

Answer: (D)

Risk assessment frameworks provide structured, repeatable processes for identifying, evaluating, and prioritizing risks within an organization. ISO 31000 is an international standard that defines principles, a framework, and a process for integrated risk management, offering a universal language and steps that organizations can tailor to their context. Pairing this with practical HSE risk assessment checklists gives concrete tools to identify hazards, assess their likelihood and impact, and determine appropriate controls in health and safety settings. Together, they represent a recognized, systematic approach to risk assessment that can be applied across industries.

The other pairs don’t fit as standard risk assessment frameworks. LEED and GRI are sustainability-focused frameworks: LEED for green building certification and GRI for sustainability reporting; they address environmental and social performance but not a structured risk assessment process. PRINCE2 and PMBOK are project management frameworks that include risk management as a component, but they’re broader project governance guides rather than specific risk assessment frameworks. SWOT and PESTLE are strategic analysis tools used for evaluating external and internal factors; they help surface potential risks or threats but do not prescribe a formal, repeatable risk assessment method.