thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

ISO/IEC 27005

ISO standard giving guidance on information security risk management in support of ISO/IEC 27001.

Definition

ISO/IEC 27005:2022 aligns with ISO 31000 and explains how to perform risk assessment and treatment for an ISMS. It describes event-based and asset-based approaches to risk identification. It does not prescribe a single methodology.

Example

An ISMS team follows ISO/IEC 27005 to build scenario-based risk assessments for Clause 6.1.2.

Exam tip

Use 27005 when the question asks for ISO guidance on security risk management specifically.

Related terms