...
what's needed to be planned;
- Make a risk registerregistry
- Make a risk inventory
- Make sure that you have an asset inventory
- Risk assessments
- Make sure you have a Risk Treatment
- Awareness training
- Plan a security training
- Plan to make policies
- Check compliance with policies
- Reviewing
- Auditing