2.1.4—2.1.4
>Control Description
The relevant entities shall review and, where appropriate, update the risk assessment results and the risk treatment plan at planned intervals and at least annually, and when significant changes to operations or risks or significant incidents occur.
Ask AI
Configure your API key to use AI features.