Question $2$ of $50$

In ISO $27001,$ what is the purpose of the Risk Treatment Options?

To assign blame for security incidents

To identify new risks

To evaluate the effectiveness of controls

To provide strategies for managing and mitigating risks