---
tags:
  - iso27001/2022/EN
---
# Clause 8.3 Information security risk treatment

The organization shall implement the information security risk treatment plan.

The organization shall retain documented information of the results of the information security risk treatment.
