Expert Advice Community

Guest

How to describe treatment options

  Quote
Guest
Guest user Created:   Jan 03, 2017 Last commented:   Jan 03, 2017

How to describe treatment options

I am currently working on the treatment table and 2 of my identified risks are fire and flood. We will have a few treatments but one I cannot complete as below. In options I will select transfer of risks to a third party, but under means of implementation I cannot find a relevant control referring to insurance ?
0 0

Assign topic to the user

ISO 27001 RISK TREATMENT PLAN

Determine responsibilities for the implementation of controls.

ISO 27001 RISK TREATMENT PLAN

Determine responsibilities for the implementation of controls.

Expert
Dejan Kosutic Jan 03, 2017

Answer: In the Risk treatment table, when you select the option "Transfer of a risk to a third party", then you shouldn't select the control in the next column; instead, you should simply write what is your intended action - in your case you should write "Purchase an insurance policy."

By the way, in the video tutorial about Risk treatment plan (that you received with your toolkit), you'll see more examples on how to fill out these treatment options.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jan 02, 2017

Jan 02, 2017

Suggested Topics