Abstract
This document provides guidance to assist organizations to:
— fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks;
— perform information security risk management activities, specifically information security risk assessment and treatment.
This document is applicable to all organizations, regardless of type, size or sector.
General information
-
Status: PublishedPublication date: 2022-10Stage: International Standard published [60.60]
-
Edition: 4Number of pages: 62
-
Technical Committee :ISO/IEC JTC 1/SC 27ICS :35.030
- RSS updates
Life cycle
-
Previously
WithdrawnISO/IEC 27005:2018
-
Now