Actions to address risks and opportunities - general
6.1.1
-
Last updated
Mandatory
Catalog reference
When planning the ISMS, consider the context and interested-party requirements to determine the risks and opportunities that must be addressed to assure intended outcomes, prevent undesired effects, and drive improvement.
Narrative — how we satisfy this requirement
Risks are kept in the Risk register and opportunities in the Opportunities register, and both are discussed in the monthly ISMS meeting.
None due within 31 days.