Information security risk treatment (operational)
8.3
-
Last updated
Mandatory
Catalog reference
Implement the risk treatment plan and retain documented information on the results of the treatment.
Narrative — how we satisfy this requirement
Treatment actions are carried out as Tasks with an Owner, and what they achieve is read back at the next Risk review.
Code
Title
No KPIs linked yet.