**What is BS ISO/IEC 27005 – Managing information security risks about?**

This revised international standard is part of the highly regarded ISO/IEC 27000 series on information security management. BS ISO/IEC 27005 gives guidance on how best to tackle information security risks and is designed to be used alongside ISO/IEC 27001.

**Who is BS ISO/IEC 27005 – Managing information security risks for?**

Information Security professionals and management in organizations of all types, sizes and sectors as long as they create, collect, process, store, transmit and dispose of information in various forms including electronic, physical and verbal (e.g. conversations and presentations), specifically:

Chief Information Security Officers (CISO)
Cybersecurity risk analysts and advisors
Information security consultants
Risk managers in compliance and information security

**What does BS ISO/IEC 27005 – Managing information security risks cover?**

BS ISO/IEC 27005 provides information security risk management guidance to:

Fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks
Perform information security risk management activities, specifically information security risk assessments and treatments

BS ISO/IEC 27005 adds to the guidance in BS ISO/IEC 27003.

**Why should you use BS ISO/IEC 27005 – Managing information security risks?**

BS ISO/IEC 27005 gives the latest international best practice guidance on information security risk management
It supplements ISO/IEC 27001 to help organizations identify infosec risks within the process of setting up an ISMS
It can help reduce the likelihood of cyberattack or other information losses and increase organizational resilience
It takes each organization’s unique environment into account
It helps businesses run and demonstrate a stable and proportionate ISMS
It helps businesses increase stakeholders’ confidence in how information is safeguarded
It helps strengthen risk management in relation to infosec

BS ISO/IEC 27005 contributes to UN Sustainable Development Goal 9 on industry, innovation and infrastructure.

What’s new about BS ISO/IEC 27005:2022?

This is a revision of BS ISO/IEC 27005:2018. The major changes in BS ISO/IEC 27005:2022 are:

Learn more about BS ISO/IEC 27005:2022 by downloading our Executive Briefing here.

BS ISO/IEC 27005:2022

Information security, cybersecurity and privacy protection. Guidance on managing information security risks

Current

Published:

31 Oct 2022