Security Risk Treatment Procedure

This procedure describes how your organisation selects, plans, resources, implements and verifies treatments for the security risks identified under the Supply Chain Security Risk Assessment Procedure, and how residual risk is evaluated and accepted. Its aim is that every significant risk is reduced to an acceptable level by controls that are proportionate, effective and maintained.

What's Inside

• Process Overview
• Interim Controls
• Treatment Option Evaluation Form
• Risk Treatment Plan and Tracking
• Control Effectiveness Verification Record
• Residual Risk Acceptance

ISO 28000 Alignment

Supports ISO 28000:2022 requirements, including Clauses 6.1, 6.3, 7.1, 8.3, 8.4 and 8.5. It fits with the rest of the QEHS Vault ISO 28000 document set.

Format

Supplied as a fully editable Microsoft Word (.docx) file. Add your organisation’s name, logo and details, then use it straight away. Instant download after purchase.