ExportableProof — Routines today. Proof tomorrow.

Evidence

Risk Acceptance Minutes Template

These minutes record formal decisions to accept residual information-security risk that remains after treatment, or to accept risk temporarily with conditions. They capture the risk ID, residual rating, rationale, conditions, expiry, approver authority and monitoring requirements. They are not a risk-assessment methodology. These minutes record a dated review of the certified Arcfield Platform ISMS in the surveillance cycle after certificate ARC-ISMS-2025-001.

Back to demo

Demo. This is an Arcfield simulation, not a customer record. Provided as-is, without warranty. It does not replace professional legal, audit, or certification advice.

OSCAL source · RAMT

{
  "artifactId": "RAMT",
  "iso": [
    "9.3",
    "7.5"
  ],
  "catalog": [
    {
      "iso": "9.3",
      "oscalId": "iso27001-9.3",
      "title": "Management review",
      "className": "iso27001-clause",
      "group": "Performance evaluation"
    },
    {
      "iso": "7.5",
      "oscalId": "iso27001-7.5",
      "title": "Documented information",
      "className": "iso27001-clause",
      "group": "Support"
    }
  ],
  "profileAlters": [
    {
      "control-id": "iso27001-7.5",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
            },
            {
              "name": "implementation-status",
              "value": "always-in-scope"
            }
          ]
        }
      ]
    },
    {
      "control-id": "iso27001-9.3",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
            },
            {
              "name": "implementation-status",
              "value": "always-in-scope"
            }
          ]
        }
      ]
    }
  ],
  "components": [],
  "sspImplementedRequirements": []
}

Check installation

What is installed here. Extra volumes are optional and do not change Ready. Update re-runs the check.

CheckResult
Webserver…
Python…
Volumes…
Scripts…
Ready…
Working directory…
Last update…