21/30412540 DC

This standard 21/30412540 DC BS ISO/IEC 27005. Information security, cybersecurity and privacy protection. Guidance on managing information security risks is classified in these ICS categories:

• 35.030 IT Security

This document provides guidance to assist organizations to:

• fulfil the requirements of ISO/IEC 27001:2013 concerning actions to address information security risks; and

• perform information security risk management activities, specifically information security risk assessment and treatment.

This document is applicable to all organizations, regardless of type, size or sector.