Process:
https://www.itgovernance.co.uk/blog/iso-27001-checklist-a-step-by-step-guide-to-implementation

Risk Treatment Plan:
https://www.itgovernance.co.uk/blog/how-to-create-an-iso-27001-compliant-risk-treatment-plan

Risk Assessment Process:
https://www.itgovernance.co.uk/iso27001/iso27001-risk-assessment

Annex A
https://www.itgovernance.co.uk/blog/iso-27001-the-14-control-sets-of-annex-a-explained

vsRisk:
https://www.itgovernance.co.uk/shop/product/vsrisk

Risk Assessment Scale (Picture)
https://www.qgcio.qld.gov.au/information-on/ict-risk-management/ict-risk-matrix

Underwriting Risk:
https://www.wns.com/insights/articles/articledetail/134/how-insurance-outsourcing-can-help-overcome-the-underwriting-crunch

Liquidity Risk:
https://www.theactuary.com/archive/old-articles/part-4/gi-3A-liquidity-risk-for-insurers/