How do Clause 8.2 (risk assessment) and Clause 8.3 (risk treatment) relate to each other during operation of the ISMS?

• A.Clause 8.3 produces the treatment plan that feeds Clause 8.2, where the risk assessment is repeated to confirm those controls
• B.Clause 8.2 produces the Statement of Applicability that feeds Clause 8.3, where the controls are audited against the Annex A list
• C.Clause 8.3 selects the controls that feed Clause 8.2, where the assessed risks are accepted by top management after implementation
• D.Clause 8.2 produces assessed risks that feed Clause 8.3, where the treatment plan is implemented to address those risks