Reference number
Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27005:2011
Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27005:2011
Information technology — Security techniques — Information security risk management
Edition 2
2011-06
Withdrawn
Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27005:2011
56742
Withdrawn (Edition 2, 2011)

Abstract

Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27005:2011 provides guidelines for information security risk management.

It supports the general concepts specified in Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach.

Knowledge of the concepts, models, processes and terminologies described in Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27001 and Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27002 is important for a complete understanding of Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27005:2011.

Ïã¸ÛÁùºÏ²Ê¿ª½±/IEC 27005:2011 is applicable to all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) which intend to manage risks that could compromise the organization's information security.

General information

Got a question?

Check out our Help and Support

Check out our FAQs

Customer care
+41 22 749 08 88

Opening hours:
Monday to Friday - 09:00-12:00, 14:00-17:00 (UTC+1)