+2.1.3. When identifying and prioritising appropriate risk treatment options and measures, the …

2.1.3. When identifying and prioritising appropriate risk treatment options and measures, the …

2.1.3.

When identifying and prioritising appropriate risk treatment options and measures, the relevant entities shall take into account the risk assessment results, the results of the procedure to assess the effectiveness of cybersecurity risk-management measures, the cost of implementation in relation to the expected benefit, the asset classification referred to in point 12.1, and the business impact analysis referred to in point 4.1.3.

1. Overview

,
Summary Regulation

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements
Source Requirement

3. Related Standards

Standards
Source Requirement

Linked Issues