NF ISO/IEC 27005

NF ISO/IEC 27005

November 2018
Standard Cancelled

Information technology - Security techniques - Information security risk management

This document provides guidelines for information security risk management. This document supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach. Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is important for a complete understanding of this document. This document is applicable to all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) which intend to manage risks that can compromise the organization's information security.

See more
View the extract
Main informations

Collections

National standards and national normative documents

Publication date

November 2018

Number of pages

59 p.

Reference

NF ISO/IEC 27005

ICS Codes

35.030   IT Security

Classification index

Z74-225

Print number

1

International kinship

ISO/IEC 27005:2018
Sumary
Information technology - Security techniques - Information security risk management

This document provides guidelines for information security risk management.

This document supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach.

Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is important for a complete understanding of this document.

This document is applicable to all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) which intend to manage risks that can compromise the organization's information security.

Replaced standards (1)
NF ISO/IEC 27005
April 2013
Standard Cancelled
Information technology - Security techniques - Information security risk management

<p>ISO/IEC 27005:2011 provides guidelines for information security risk management.</p> <p>It supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach.</p> <p>Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is important for a complete understanding of ISO/IEC 27005:2011.</p> <p>ISO/IEC 27005:2011 is applicable to all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) which intend to manage risks that could compromise the organization's information security.</p>

Standard replaced by (1)
NF ISO/IEC 27005
February 2023
Standard Current
Information security, cybersecurity and privacy protection - Guidance on managing information security risks

<p>This document provides guidance to assist organizations to:</p> <p>—    fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks;</p> <p>—    perform information security risk management activities, specifically information security risk assessment and treatment.</p> <p>This document is applicable to all organizations, regardless of type, size or sector.</p>

Table of contents
View the extract
  • Avant-propos
  • 1 Domaine d'application
  • 2 Références normatives
  • 3 Termes et définitions
  • 4 Structure du présent document
  • 5 Contexte
  • 6 Présentation générale du processus de gestion des risques en sécurité de l'information
  • 7 Établissement du contexte
  • 8 Appréciation des risques en sécurité de l'information
  • 9 Traitement des risques en sécurité de l'information
  • 10 Acceptation des risques en sécurité de l'information
  • 11 Communication et concertation relatives aux risques en sécurité de l'information
  • 12 Surveillance et réexamen des risques en sécurité de l'information
  • Annexe A (informative) Définition du domaine d'application et des limites du processus de gestion des risques en sécurité de l'information
  • Annexe B (informative) Identification et valorisation des actifs et appréciation des impacts
  • Annexe C (informative) Exemples de menaces types
  • Annexe D (informative) Vulnérabilités et méthodes d'appréciation des vulnérabilités
  • Annexe E (informative) Approches d'appréciation des risques en sécurité de l'information
  • Annexe F (informative) Contraintes liées à la réduction du risque
  • Bibliographie
ZOOM ON ... the Requirements department
To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:
- mandatory clauses to satisfy,
- non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document “ISO / IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents ”as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!

With Requirements, quickly access the main part of the normative text!
What is the Redline format?
The Redline + service - standards comparator allows you to easily and simply identify major changes between the current standard and its last canceled version.

At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula.
At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula

The Redlines + service is offered to you on the collection of French standards in force, in French language and in HTML and PDF format.

For an overview of the service, click on View a standard in redline format
Need to identify, monitor and decipher standards?

COBAZ is the simple and effective solution to meet the normative needs related to your activity, in France and abroad.

Available by subscription, CObaz is THE modular solution to compose according to your needs today and tomorrow. Quickly discover CObaz!

Request your free, no-obligation live demo

I discover COBAZ