Actions to address risks and opportunities - general
6.1.1
-
Last updated
Mandatory
Catalog reference
When planning the ISMS, consider the context and interested-party requirements to determine the risks and opportunities that must be addressed to assure intended outcomes, prevent undesired effects, and drive improvement.
Narrative — how we satisfy this requirement
Risks are kept in the Risk register and opportunities in the Opportunities register, and both are discussed in the monthly ISMS meeting.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due