bullet green arrow 25 Organization’s  ability  to  meet  its  objectives,  and  the  effects  of  uncertainty  are  not  the  same  for  all organizations.

bullet green arrow 25Under the requirements of 6.1, the organization is responsible for its application of risk-based thinking and the actions it takes to address risk, including whether or not to retain documented information as evidence of its determination of risks.