[BS 7799-3:2006] Risk treatment and management decision making [SP 800-30] Risk mitigation [Risk IT] RE 2.3 Identify risk response options RR2.3 Respond to discovered risk exposure and opportunity [ISO/IEC 27005:2008] 
Risk treatment
C o n t e x t e s t a b l i s h m e n t
R i s k a s s e s s m e n t
R i s k t r e a t m e n t
R i s k a c c e p t a n c e
R i s k c o m m u n i c a t i o n
R i s k m o n i t o r i n g a n d r e v i e w