Which standard defines the iterative risk management process shown below?
ISO/IEC 27005 defines an information security risk management process comprising context establishment, risk assessment, risk treatment, risk acceptance, risk communication, and risk monitoring and review. Risk assessment includes risk identification, analysis, and evaluation. ISO: ISO/IEC 27005 risk-management process
Community Discussion