ISO/IEC 27005-ed.4.0

Annotation of standard text ISO/IEC 27005-ed.4.0 :

This document provides guidance to assist organizations to: — fulfil the requirements of ISO/IEC 27001 concerning actions to address information security risks; — perform information security risk management activities, specifically information security risk assessment and treatment. This document is applicable to all organizations, regardless of type, size or sector. Le present document fournit des recommandations pour aider les organismes a: — satisfaire aux exigences de lISO/IEC 27001 concernant les actions visant a traiter les risques lies a la securite de linformation; — realiser des activites de gestion des risques lies a la securite de linformation, en particulier lappreciation et le traitement de ces risques. Le present document est applicable a tous les organismes, quels que soient leur type, leur taille ou leur secteur.