ISO/IEC 27005:2011
w
ISO/IEC 27005:2011
56742

Abstract 

ISO/IEC 27005:2011 provides guidelines for information security risk management.

It supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach.

Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is important for a complete understanding of ISO/IEC 27005:2011.

ISO/IEC 27005:2011 is applicable to all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) which intend to manage risks that could compromise the organization's information security.


General information 

  •  :  Withdrawn
     : 2011-06
  •  : 2
     : 68
  •  : ISO/IEC JTC 1/SC 27 Information security, cybersecurity and privacy protection
  •  :
    35.030 IT Security
    03.100.70 Management systems

Got a question?

Check out our FAQs

Customer care
+41 22 749 08 88

Opening hours:
Monday to Friday - 09:00-12:00, 14:00-17:00 (UTC+1)

Keep up to date with ISO

Sign up to our newsletter for the latest news, views and product information.