BS EN ISO/IEC 27005:2024 - Page 3

What is BS EN ISO/IEC 27005:2024 Managing information security risks about?

This revised international standard is part of the highly regarded ISO/IEC 27000 series on information security management. BS EN ISO/IEC 27005:2024 gives guidance on how best to tackle information security risks and is designed to be used alongside BS EN ISO/IEC 27001.

Who is BS EN ISO/IEC 27005:2024 – Managing information security risks for?

Information Security professionals and management in organizations of all types, sizes and sectors as long as they create, collect, process, store, transmit and dispose of information in various forms including electronic, physical and verbal (e.g. conversations and presentations), specifically:

• Chief Information Security Officers (CISO)
• Cybersecurity risk analysts and advisors
• Information security consultants
• Risk managers in compliance and information security

What does BS EN ISO/IEC 27005:2024 – Managing information security risks cover?

BS EN ISO/IEC 27005:2024 provides information security risk management guidance to:

• Fulfil the requirements of BS EN ISO/IEC 27001 concerning actions to address information security risks
• Perform information security risk management activities, specifically information security risk assessments and treatments

Why should you use BS EN ISO/IEC 27005:2024 – Managing information security risks?

• BS EN ISO/IEC 27005:2024 gives the latest international best practice guidance on information security risk management
• It supplements BS EN ISO/IEC 27001 to help organizations identify infosec risks within the process of setting up an ISMS
• It can help reduce the likelihood of cyberattack or other information losses and increase organizational resilience
• It takes each organization’s unique environment into account
• It helps businesses run and demonstrate a stable and proportionate ISMS
• It helps businesses increase stakeholders’ confidence in how information is safeguarded