Risk Treatment Option
What is Risk Treatment Option?
The different approaches available for addressing a risk, including avoidance, reduction, sharing, transfer, and acceptance.
Frameworks that govern risk treatment option
What the standards actually require on risk treatment option
Requirements naming risk treatment option across 6 standards, quoted from the control text.
Input: prioritised risks with the scenarios leading to them. Action: choose treatment options. Trigger: no treatment plan exists or it is incomplete. Output: prioritised risks with their chosen options.
iso-27005-2022::8.2 · Selecting appropriate information security risk treatment options →Decide how each risk will be treated: by retaining it, reducing it, avoiding it or transferring (sharing) it. Outcomes 4 and 5; outputs: risk treatment (08-55) and risk status (15-09).
automotive-spice-for-cybersecurity-pam-v2-0::MAN.7.BP4 · MAN.7.BP4 Define risk treatment options →Guidance: choosing treatment options balances the benefits for the objectives against the cost, effort and disadvantages of implementing them. Options are not mutually exclusive and not all fit every situation;
iso-31000-2018::6.5.2 · Selection of risk treatment options →Choosing treatment weighs what an option gains against its cost, effort and drawbacks, and options can be combined (ISO 31000:2018, 6.5.2). They are: not starting or stopping the activity so the risk is avoided;
iso-iec-23894-2023::6.5.2 · Selection of risk treatment options →Carries ISO 31000:2018 6.5.2 into privacy risk: choose options by weighing benefit against the cost and effort of putting them in place.
iso-iec-27557-2022-organisational-privacy-risk-management::6.5.2 · 6.5.2 Selection of risk treatment options →The project shall set out at least one EVR, each a socio-technical statement describing risk treatment options (technical, organizational or social) that promote and protect the prioritised core values and realise the value demonstrators, with at least one EVR...
ieee-7000::9.3(a) · Formulate and record ethical value requirements →Questions people ask about risk treatment option
What is Risk Treatment Option?
Why is Risk Treatment Option important for compliance?
Which compliance frameworks address Risk Treatment Option?
Where can I learn more about Risk Treatment Option?
See how Risk Treatment Option applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.