ISO/IEC 27005
- Name
- ISO/IEC 27005
- Publisher
- ISO/IEC
- Type
- Risk framework
- What it is
Guidance on information security risk management supporting ISO/IEC 27001.
- Key points
- Context establishment, risk identification, analysis, evaluation and treatment
- Supports ISO/IEC 27001 risk requirements
- On the exam
Consistent risk methodology and criteria.