ISO/IEC 27001:2022/Operation/22 of 123
8.3Information security risk treatment
Control family: Operation
Control description
The organization shall implement the information security risk treatment plan.
The organization shall retain documented information of the results of the information security risk
treatment.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.