The International Risk Management Standard ISO 31000 describes itself as a guide. Its application varies widely across organisations. This is to be expected when the context is substantially different (eg a compliance risk process will be different to one for projects). There is also the recent (version 2 Feb 2019) IEAus Risk Engineering Society "Contingency Guidelines". Both these documents tell you what is expected but do not give too much practical insight into HOW to undertake project risk and contingency management.
Project risk has two components that separate it from other risk processes:
1. A rapidly changing risk profile which requires a particularly dynamic process and
2. Consumption of precious capital
This presentation describes a well-honed process that will enable you to effectively manage risk.