Risk Treatment
What is Risk Treatment?
The process of selecting and implementing measures to modify risk. Options include: mitigate (reduce), accept (retain), avoid (eliminate), or transfer (share) the risk.
Related terms
Frameworks that govern risk treatment
What the standards actually require on risk treatment
Requirements naming risk treatment across 6 standards, quoted from the control text.
The organization carries out the risk treatment plan and keeps documented results of the treatment.
iso-27001-2013::clause-8.3 · Information security risk treatment →The risk treatment plan must be put into effect, and documented information on the results of risk treatment must be retained.
iso-27001-2022::clause-8.3 · Information security risk treatment →Define and perform the risk treatment activities for the selected options. Outcomes 4 and 5; outputs 08-55 risk treatment, 14-02 corrective action, 15-09 risk status.
automotive-spice-for-cybersecurity-pam-v2-0::MAN.7.BP5 · MAN.7.BP5 Define and perform risk treatment activities →Input: evaluated risks. Action: perform treatment per clause 8. Trigger: planned intervals or events. Output: residual risks that are accepted or retained.
iso-27005-2022::9.2 · Performing information security risk treatment process →Guidance: a treatment plan specifies how the chosen options will be implemented so that the people involved understand the arrangements and progress can be monitored;
iso-31000-2018::6.5.3 · Preparing and implementing risk treatment plans →Implement the AI risk treatment plan under 6.1.3 and verify it works; run the treatment process for newly identified risks; where treatment options prove ineffective, review and revalidate them through 6.1.3 and update the plan.
iso-iec-42001-2023::8.3 · AI risk treatment →Questions people ask about risk treatment
What is Risk Treatment?
Why is Risk Treatment important for compliance?
What concepts are related to Risk Treatment?
Which compliance frameworks address Risk Treatment?
Where can I learn more about Risk Treatment?
See how Risk Treatment applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.