Clause 8.1.b Use ISO 27005:2022 as a guide to help you develop a risk and opportunities methodology. Add your ‘risk treatment plan’ to your Statement of Applicability.