>myctrl.tools
Preferences
Under active development — Content is continuously updated and improved
Compare

2.1.3—2.1.3

>Control Description

When identifying and prioritising appropriate risk treatment options and measures, the relevant entities shall take into account the risk assessment results, the results of the procedure to assess the effectiveness of cybersecurity risk-management measures, the cost of implementation in relation to the expected benefit, the asset classification referred to in point 12.1., and the business impact analysis referred to in point 4.1.3.

Ask AI

Configure your API key to use AI features.