The framework is based on a systemic perspective where a system is a set of (partly) interconnected elements with clear boundaries and which foregrounds interdependencies between elements within a system (elements can be systems themselves). It allows for the assessment and management of both individual risks (risk to individual elements within the system) and systemic risks (risk of the system due to interdependencies). The implementation of the framework is an iterative process, with a possibility of including a range of methodologies, both qualitative and quantitative. As a framework, it does not prescribe methodologies and approaches, but rather provides a frame with which one can work.