Risk Analysis (ISO/IEC 27005)

Methodology, asset and threat catalogs, scales and decision support.

format

Training

Duration

1–2 days

Audience

Risk managers, CISO teams

Objective

Build practical capability to run a risk analysis aligned with ISO/IEC 27005.

Overview of the ISO/IEC 27005 methodology

Building asset and threat catalogs

Likelihood, severity and impact scales

Risk treatment options and residual risk decisions

Integration with an ISMS (ISO/IEC 27001)

Hands-on exercise on a real or simulated asset inventory