What is an emerging risk, and how does it differ from a conventional risk?
An emerging risk is a threat that is developing but not yet well understood, with no reliable history to estimate how likely it is or how hard it will hit. A conventional risk is already known and can be measured against past data. The difference matters because standard risk tools tend to overlook emerging risks until they are already causing damage.
A conventional risk is one your organisation already recognises. There is history behind it, enough past experience or data to estimate a probability and a likely impact, and it usually fits neatly into an existing risk register. Fire, fraud, equipment failure and currency movement all behave this way. You may not welcome them, but you know how to describe them.
An emerging risk is different in kind, not just in size. It is still taking shape, so the evidence is thin and often contradictory, and the usual questions of how likely and how costly cannot be answered with any confidence. Generative AI adoption, climate-driven supply disruption, and rapid shifts in regulation are recent examples. Each began as a faint signal that was easy to dismiss, and each became material faster than traditional risk cycles could react.
The gap between the two creates a specific problem. A standard probability and impact matrix rewards risks that can be quantified, so an emerging risk with unclear numbers scores low and quietly drops off the register, right up until the moment it does not. Boards then ask why nobody flagged it, when the method itself was filtering it out.
ISO/TS 31050 is built around this exact gap. Instead of asking you to quantify a risk you cannot yet measure, it gives you techniques for detecting weak signals, for judging how quickly a risk is moving, and for choosing a proportionate response while the picture is still forming. That shift, from measuring what is known to managing what is uncertain, is the core skill taught in the ISO/TS 31050 Emerging Risks Manager course, and it is what separates emerging risk work from conventional risk management.
Related Information
- Conventional risk: known, historical, quantifiable
- Emerging risk: developing, uncertain, little or no historical data
- Examples: generative AI, climate-driven disruption, fast-moving regulation
- Standard probability-impact matrices tend to filter emerging risks out
- ISO/TS 31050 manages uncertainty instead of forcing quantification
“The risks that hurt most are the ones that scored too low to make the register. Emerging risk work is about catching them while they still look like noise.”
What's next?
Explore related training
Browse all: Governance, risk & complianceBrowse all Governance, risk & compliance training courses
Related Answers
What is the ISO/TS 31050 Emerging Risks Manager certification and what does it qualify you to do?
The PECB ISO/TS 31050 Emerging Risks Manager certification proves you can identify, assess and treat emerging risks using ISO/TS 31050 inside an ISO 31000 process. It qualifies you to run an emerging risk programme in a risk, resilience or governance role, and to give a board a credible read on exposure that cannot yet be quantified.
byHenri HAENNI
What is the risk intelligence cycle in ISO/TS 31050?
The risk intelligence cycle is the method ISO/TS 31050 uses to turn scattered external signals into decisions leadership can act on. It runs continuously: gather signals, make sense of them, assess what they mean, communicate the finding, and feed it back into monitoring. It keeps an emerging risk under active management instead of sitting undetected until it becomes a crisis.
byAlexis HIRSCHHORN
What is the difference between ISO/TS 31050 and ISO 31000?
ISO 31000 sets the general principles and process for managing any risk, while ISO/TS 31050 is a technical specification that extends that process to emerging risks: threats that surface as weak, uncertain signals with no historical data. You apply 31050 inside the 31000 framework, not as a replacement for it.
byHenri HAENNI
More from ISO/TS 31050 Emerging Risks Manager
What is the ISO/TS 31050 Emerging Risks Manager certification and what does it qualify you to do?
The PECB ISO/TS 31050 Emerging Risks Manager certification proves you can identify, assess and treat emerging risks using ISO/TS 31050 inside an ISO 31000 process. It qualifies you to run an emerging risk programme in a risk, resilience or governance role, and to give a board a credible read on exposure that cannot yet be quantified.
How is the ISO/TS 31050 course delivered?
Abilene Academy delivers the ISO/TS 31050 course in three formats: in person in Morges, virtual live with an instructor, and self-study at your own pace. All three cover the same two-day programme and lead to the same PECB exam and certification.
How long is the ISO/TS 31050 Emerging Risks Manager training?
The ISO/TS 31050 Emerging Risks Manager training runs over two days. The certification exam is a separate two-hour session, and at Abilene Academy the same two-day format is available onsite in Morges, as virtual live training, or as self-study.
Is the certification exam included?
Yes. The ISO/TS 31050 Emerging Risks Manager course includes the PECB certification exam, along with the official training materials. If you do not pass on the first attempt, you qualify for a free retake within 12 months.
Browse all FAQs →
Full knowledge base