Risk Assessment & Treatment Procedure

This procedure defines how your organisation identifies, analyses, evaluates and treats information security risks in a consistent, valid and comparable manner, in accordance with Clauses 6.1.2, 6.1.3, 8.2 and 8.3 of ISO/IEC 27001:2022.

What's Inside

• Responsibilities
• Risk Assessment Methodology and Criteria (Clause 6.1.2)
• Risk Identification
• Risk Analysis
• Risk Evaluation
• Risk Treatment (Clause 6.1.3)
• Statement of Applicability
• Risk Treatment Plan

ISO 27001 Alignment

Supports ISO/IEC 27001:2022 requirements, including Clauses 6.1.2, 6.1.3, 8.2 and 8.3. It fits with the rest of the QEHS Vault ISO 27001 document set.

Format

Supplied as a fully editable Microsoft Word (.docx) file. Add your organisation’s name, logo and details, then use it straight away. Instant download after purchase.