Actions to address risks and opportunities - general
6.1.1
-
Last updated
Mandatory
Catalog reference
When planning the ISMS, consider the context and interested-party requirements to determine the risks and opportunities that must be addressed to assure intended outcomes, prevent undesired effects, and drive improvement.
Narrative — how we satisfy this requirement
Risks are kept in the Risk register and opportunities in the Opportunities register, and both are discussed in the monthly ISMS meeting.