The 2008 certification concentrates on the aspect of having a plan and implementing it and finding out the errors. Once this is carried out, the organization would have to work on the errors to change it. However, the 2015 certification concentrates more on reducing the number of errors which is caused by risk. Apart from this, the 2015 certification concentrates more on the process of risk mitigation.