The IRIA risk management process is based on both and operation and legal foundation.
In most democracies the ultimate regulatory body is the court (legal) system.
As such, IRIA and other professional instruction and certification providers use the background, credibility and the experience of court recognized subject matter experts and their objective, evidence based research and conclusions.
This fact based process has been proven to produce be meaningful, applicable and practical operational standards and has been proven to be defendable in court.
This expertise has been quantified and qualified in the Risk Management Matrix® and is the foundation of the IRIA Professional Standards.