---
notetype: reference
standard: ISO 27001
version: 2022
language: EN
type: clause
id: "C.8.3"
title: "Information security risk treatment"
tags:
- iso27001/2022/EN
- sourcetext
status: active
---
## 8.3 Information security risk treatment

The organization shall implement the information security risk treatment plan.

The organization shall retain documented information of the results of the information security risk treatment.
