ISO/IEC 27557:2022 - Organisational Privacy Risk Management

Clause 6: Risk management process – ISO/IEC 27557:2022 - Organisational Privacy Risk Management

ISO/IEC 27557:2022 - Organisational Privacy Risk Management 6.5.1: Risk treatment: general

What does 6.5.1 require?

Carries ISO 31000:2018 6.5.1 into privacy risk: treatment is a repeating cycle of drawing up and choosing options, planning and carrying out the treatment, checking whether it worked, judging whether what remains is acceptable, and treating again if it is not. This standard's own wording is not held.

Maintained by Gerard BlokdykControl text last updated 25 September 2026

Other controls in Clause 6: Risk management process – ISO/IEC 27557:2022 - Organisational Privacy Risk Management

6.1 6.1 Process: general
6.2 6.2 Communication and consultation
6.3.1 6.3.1 Scope, context and criteria: general
6.3.2 6.3.2 Defining the scope
6.3.3 6.3.3 External and internal context
6.3.4 6.3.4 Defining risk criteria
6.4.1 6.4.1 Risk assessment: general
6.4.2 6.4.2 Risk identification

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ISO/IEC 27557:2022 - Organisational Privacy Risk Management controls