NF ISO/IEC 27005

NF ISO/IEC 27005

February 2023
Standard Cancelled

Information security, cybersecurity and privacy protection - Guidance on managing information security risks

This document provides guidance to assist organizations to:—    fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks;—    perform information security risk management activities, specifically information security risk assessment and treatment.This document is applicable to all organizations, regardless of type, size or sector.

View the extract
Main informations

Collections

National standards and national normative documents

Publication date

February 2023

Number of pages

80 p.

Reference

NF ISO/IEC 27005

ICS Codes

35.030   IT Security

Classification index

Z74-225

Print number

1

International kinship

Sumary
Information security, cybersecurity and privacy protection - Guidance on managing information security risks

This document provides guidance to assist organizations to:

—    fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks;

—    perform information security risk management activities, specifically information security risk assessment and treatment.

This document is applicable to all organizations, regardless of type, size or sector.

Replaced standards (1)
NF ISO/IEC 27005
November 2018
Standard Cancelled
Information technology - Security techniques - Information security risk management

This document provides guidelines for information security risk management. This document supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach. Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is important for a complete understanding of this document. This document is applicable to all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) which intend to manage risks that can compromise the organization's information security.

Standard replaced by (1)
NF EN ISO/IEC 27005
August 2024
Standard Current
Information security, cybersecurity and privacy protection - Guidance on managing information security risks

ZOOM ON ... the Requirements department
To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:
- mandatory clauses to satisfy,
- non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document “ISO / IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents ”as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!

With Requirements, quickly access the main part of the normative text!
What is the Redline format?
The Redline + service - standards comparator allows you to easily and simply identify major changes between the current standard and its last canceled version.

At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula.
At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula

The Redlines + service is offered to you on the collection of French standards in force, in French language and in HTML and PDF format.

For an overview of the service, click on View a standard in redline format
Need to identify, monitor and decipher standards?

COBAZ is the simple and effective solution to meet the normative needs related to your activity, in France and abroad.

Available by subscription, CObaz is THE modular solution to compose according to your needs today and tomorrow. Quickly discover CObaz!

Request your free, no-obligation live demo

I discover COBAZ