Relevant Standard Item No | Task Title | Task Details | Expectation |
6.1.1 | Planning - Actions to address risks and opportunities - General | When planning and creating your information security management system, did you take into account your interested parties, internal and external issues, and the expectations of your interested parties? | Document/Practice |
6.1.1 | Planning - Actions to address risks and opportunities - General | Have you planned your risks and opportunities by taking into account that your information security management system can achieve its intended outputs and objectives? | Document/Practice |
6.1.1 | Planning - Actions to address risks and opportunities - General | Do your risks and opportunities contain elements that can remove or mitigate barriers to achieving your information security goals? | Document/Practice |
6.1.1 | Planning - Actions to address risks and opportunities - General | Have you planned your risks and opportunities to prevent or reduce undesirable effects and consequences? | Document/Practice |