If you have been keeping up with our recent blogs, you can see that the ISO 27001 certification is a hot topic. The certificate serves as an international standard for superior information security management system (ISMS) compliance. While the process of earning this certification is a lengthy one, it is well worth it. In the process of becoming certified, your company will undergo an internal security audit in which there are many steps. One of these steps is the risk treatment plan, in which you list mitigation options for each identified risk present in your organization. Essentially, this will serve as an “action plan” for how to plan to address each risk.