ISO/IEC 27005:2011Withdrawn

Information technology — Security techniques — Information security risk management

Technologies de l'information — Techniques de sécurité — Gestion des risques liés à la sécurité de l'information

Abstract / scope

ISO/IEC 27005:2011 provides guidelines for information security risk management.

It supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach.

Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is important for a complete understanding of ISO/IEC 27005:2011.

ISO/IEC 27005:2011 is applicable to all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) which intend to manage risks that could compromise the organization's information security.

Life cycle

Replaces

ISO/IEC 27005:2008WithdrawnInformation technology — Security techniques — Information security risk managementInternational Standard · Published 4 Jun 2008 · ISO/IEC JTC 1/SC 27

Replaced by

ISO/IEC WD 27005Deleted (project abandoned)Information technology — Security techniques — Information security risk managementInternational Standard · ISO/IEC JTC 1/SC 27 ISO/IEC 27005:2018WithdrawnInformation technology — Security techniques — Information security risk managementInternational Standard · Published 9 Jul 2018 · ISO/IEC JTC 1/SC 27