This document provides guidance to assist organizations to:
— fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks;
— perform information security risk management activities, specifically information security risk assessment and treatment.
This document is applicable to all organizations, regardless of type, size or sector.
IN_DEVELOPMENT
prSSH EN ISO/IEC 27005:2024
40.20
DIS ballot initiated: 12 weeks
Feb 10, 2025
Only informative sections of projects are publicly available. To view the full content, you will need to create an account. If you are a member, please log in to your account by clicking on the "Log in" button.