This International Standard supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach.” Introduction ISO/IEC 27005:2018 - Information technology - Security techniques - Information security risk management ( third edition) Abstract “This International Standard provides guidelines for information security risk management.
