Guest post Created: Jan 12, 2016 Last commented: Jan 12, 2016

Risk Management Methodology 27001:2013

How is the good practice and formulate risk assessment ? According to new version, now risk assessment refer to ISO 31000 however can we still use others methodology such NIST or 27005. Thanks

0 0

Assign topic to the user

Select user

Guest

Guest post Jan 12, 2016

For developing a methodology for risk assessment ISO 31000 is not very practical because it is very generic - it does not provide detailed guidance.

Therefore we recommend ISO 27005 because:
1) It is specific for information security management
2) It is much more practicable
3) It is fully compliant with ISO 31000

For details on risk assessment best practice please have a look on the following webinar for further information on risk assessment: https://advisera.com/27001academy/webinar/basics-risk-assessment-treatment-according-iso-27001-free-webinar-demand/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community