c.**Addressing risks and opportunities associated with its context and objectives**

According to ISO 9001 ([1], p. 4) standard, when planning for an effective business management system, the organisation shall determine risks and opportunities that need to be addressed to give assurance that the management system can achieve its intended results, enhance desirable effects, prevent or reduce undesired effects and achieve business improvement. Alfonsi [35], a corporate legal adviser, argued that a well-defined enterprise risk management (ERM) process framework could protect and create value for organisations and their owners. The author is in concurrence with the assertions mentioned above by Alfonsi as ISO 9001:2015 standard for ERM adoption that can integrate risk management

into their overall business management systems through the setting and planning of business objectives and strategies for optimal performance.
