EVS-EN ISO/IEC 27005:2024

ISO/IEC 27005 provides essential guidance to help organizations:

— Meet the ISO/IEC 27001 requirements related to managing information security risks.

— Conduct information security risk management activities, including risk assessment and treatment.

Applicable to organizations of any size, sector, or type, ISO/IEC 27005 supports those establishing and implementing an Information Security Management System (ISMS) in line with ISO/IEC 27001. It is also valuable for information security risk management professionals — such as ISMS practitioners, risk owners, and other stakeholders — or for organizations looking to enhance their risk management processes.

The latest version, ISO/IEC 27005:2022, has been adopted in Europe as EN ISO/IEC 27005:2024 without modifications.