Abstract

This document provides guidance to assist organizations to: - fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks; - perform information security risk management activities, specifically information security risk assessment and treatment. This document is applicable to all organizations, regardless of type, size or sector

Begin

2024-02-08

WI

JT013071

Planned document number

DIN EN ISO/IEC 27005

Project number

04301097

Responsible national committee

NA 043-04-13 GA - DIN/DKE Joint working committee Cybersecurity  

Responsible european committee

CEN/CLC/JTC 13 - Cybersecurity and Data Protection  

Responsible international committee

ISO/IEC JTC 1/SC 27/WG 1 - Information security management systems  

draft standard

Information security, cybersecurity and privacy protection - Guidance on managing information security risks (ISO/IEC 27005:2022); German and English version prEN ISO/IEC 27005:2024
2024-05
Order from DIN Media