Conformance1

Tools for conforming to standards, goals and processes

Clause 8.3: Information security risk treatment

Use ISO 27005:2022 as a guide to help the organization develop a risk and opportunities methodology. See information on ‘risk treatment’ in Clause 7.4.2 of ISO 27005.