The answer to this question is B
Those included in the risk treatment plan
To obtain the approval of the management for the ISMS implementation, the follwoing documented information should be prepared in advance:
Risk analysis report
Risk Treatment plan (including the identification of residual risks) and the statement of applicability
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Acrisius
3 months, 1 week ago