Who set the standards for XXX?
ISO 31000
ISO 31000 is a family of standards relating to risk management codified by the International Organization for Standardization.
International Organization for Standardization