TIRM Process Stage C
Information Risk Treatment
This chapter is a step-by-step guide for implementing the information risk treatment stage of the TIRM process. Information risk treatment first identifies and ranks the root causes of the information risks, for which potential information risk treatments are identified. To evaluate and select the right information risk treatment options, the costs, benefits, and expected implementation risks have to estimated. The benefits are, therefore, calculated with the help of the risk figures from stage B. Communicating effectively to the most important stakeholders increases their support during implementation. Information risk treatment plans are developed then implemented, and the ...