left-svg
Bonus expert support worth $500
with the ISO 9001 Documentation Toolkit
Limited-time offer – ends June 30, 2022.
right-svg

Tag: "iso27005" - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Help: Creating risk management plan under ISO27005

    Hi, I am after some help with creating a risk management plan, I have completed the work but have a few questions. The methodology I chose to apply was ISO27005, but I am unclear on whether the risk communication and risk monitoring review sections are mandatory? Actually which parts are mandatory? Another thing I am not clear on is how I am supposed to provide justification of the risk treatment options. Is this something which is necessary under ISO27005? Thanks