ISO/IEC 27005:2022
Guidance on managing information security risk within an ISMS.
International · ISO/IECWho it applies to
Risk owners and ISMS managers.
Key areas
- Risk identification, analysis and evaluation
- Risk treatment options
- Communication and monitoring of risk
How Nigehban helps
- Gap assessment against the requirements
- Remediation roadmap and implementation support
- Independent audit and evidence review
- Monitoring that proves controls keep working
Related standards
ISO/IEC 27001:2022
The certifiable standard for an information security management system (ISMS).
InternationalISO/IEC 27002:2022
Practical guidance for implementing the controls listed in ISO/IEC 27001 Annex A.
InternationalISO/IEC 27017
Security controls for cloud services, for both providers and customers.
International