NF EN ISO/IEC 27005

NF EN ISO/IEC 27005

August 2024
Standard Current

Information security, cybersecurity and privacy protection - Guidance on managing information security risks

View the extract
Main informations

Collections

National standards and national normative documents

Publication date

August 2024

Number of pages

80 p.

Reference

NF EN ISO/IEC 27005

ICS Codes

35.030   IT Security

Classification index

Z74-225

Print number

1

International kinship

ISO/IEC 27005:2022

European kinship

EN ISO/IEC 27005:2024
Replaced standards (1)
NF ISO/IEC 27005
February 2023
Standard Current
Information security, cybersecurity and privacy protection - Guidance on managing information security risks

This document provides guidance to assist organizations to: —    fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks; —    perform information security risk management activities, specifically information security risk assessment and treatment. This document is applicable to all organizations, regardless of type, size or sector.

Table of contents
  • 1 Domaine d'application
  • 2 Références normatives
  • 3 Termes et définitions
  • 4 Structure du présent document
  • 5 Gestion des risques liés à la sécurité de l'information
  • 6 Établissement du contexte
  • 7 Processus d'appréciation du risque lié à la sécurité de l'information
  • 8 Processus de traitement du risque lié à la sécurité de l'information
  • 9 Réalisation des activités opérationnelles
  • 10 Exploiter les processus SMSI connexes
  • A Techniques à l'appui du processus d'appréciation du risque - Exemples
  • Bibliographie
ZOOM ON ... the Requirements department
To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:
- mandatory clauses to satisfy,
- non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document “ISO / IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents ”as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!

With Requirements, quickly access the main part of the normative text!
What is the Redline format?
The Redline + service - standards comparator allows you to easily and simply identify major changes between the current standard and its last canceled version.

At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula.
At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula

The Redlines + service is offered to you on the collection of French standards in force, in French language and in HTML and PDF format.

For an overview of the service, click on View a standard in redline format
Need to identify, monitor and decipher standards?

COBAZ is the simple and effective solution to meet the normative needs related to your activity, in France and abroad.

Available by subscription, CObaz is THE modular solution to compose according to your needs today and tomorrow. Quickly discover CObaz!

Request your free, no-obligation live demo

I discover COBAZ