<![CDATA[Background: Meal provision for Indonesian Hajj pilgrims, the world's largest national contingent (221,000 in 1447 H/2026 CE), is a large-scale, faith-based service governed by Sharia-based catering contracts, yet its risk management remains reactive. ISO 31000, as a secular-technical standard, cannot by itself capture the spiritual dimension of risk, namely halal integrity and the sanctity of worship. Objective: This study evaluates ISO 31000-based risk management in Hajj meal provision during the 2026 operations and integrates it with maqāṣid al-sharī'ah (ḥifẓ al-dīn, ḥifẓ al-nafs, and ḥifẓ al-māl) to develop a Sharia-aligned risk governance model. Methods: A qualitative-descriptive evaluative case study triangulates regulatory documents (KMHU No. 24/2025 and No. 43/2026), interviews and FGDs with PPIH personnel, catering partners, and an expert panel, and a likelihood–impact risk assessment. Results/Findings: Risks concentrate in the distribution and serving stages, peaking in Armina. The extreme risks (distribution delays, deteriorating food quality, and menu and portion non-conformity; scores 20–25) threaten both ḥifẓ al-nafs and ḥifẓ al-dīn. Implementation maturity is moderate (3.2 of 5): identification and analysis are established, but treatment and monitoring remain reactive because caterer liability (ḍamān) is enforced after incidents rather than prevented contractually. Contribution: This is the first study to integrate a global risk management standard with Islamic legal ethics in Hajj services. It offers a Maqāṣid-based risk register linking each ISO 31000 risk to the Sharia objective it threatens and to Sharia-based mitigation, reframes the organizer–caterer relationship as an ijārah contract bearing ḍamān, and provides Key Risk Indicators the Ministry of Hajj and Umrah can embed in catering contracts.]]>
