Q&A: Frequently Asked Questions About the ISO 27005 Information Security Risk Management Standard

Summary

A new international standard presents a useful framework for information-security-focused risk management. Security professionals and other risk management stakeholders should familiarize themselves with this standard, which Gartner believes will receive broader acceptance than its predecessors.