ISO/IEC 27005
Managing
Information
Security Risks

The ISOIEC 27005 standard provides guidelines for information security risk management.

This standard supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach.

Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is important for a complete understanding of this document.