ISO/IEC 27005 – Information Security Risk Management Training and Certification

ISO/IEC 27005 is the international standard for information security risk management. Building on the principles of ISO 31000, it provides guidance on identifying, analyzing, evaluating, treating and monitoring information security risks.

ISO/IEC 27005 provides guidance on:

Establishing a risk management process tailored to the organization's context
Performing risk assessment and selecting appropriate risk treatment options
Communicating and consulting with relevant stakeholders
Monitoring, reviewing and documenting risk
Aligning risk management with the information security management system (ISMS)
Continually improving risk management

The standard is a valuable tool for organizations seeking to meet the risk management requirements of ISO/IEC 27001, helping to strengthen the ISMS and better protect information assets.

Glasspaper is a PECB Titanium Partner and offers certified ISO/IEC 27005 training in the classroom, virtually and as eLearning.

ISO/IEC 27005 – Information Security Risk Management Training and Certification

Filter