Process

Process

1. Establish the risk management context

2. Quantitatively or qualitatively assess

3. Treat , retain, avoid and share isks appropriately,

4. Keep stakeholders informed throughout the process

5. Monitor and review risks, risk treatments, o

6. ISO 27005

   • Pilar
     • PILAR is a software tool. It was designed to implement the methodology
   • Benefit
     • Provides guidelines for information security risk management which will enable effective management of the information security risks within your organisation
     • The standard is now fully aligned with the International Standard for risk management, ISO31000. Using the two together can enhance the way risks within your organisation are managed effectively.
     • ISO27005 uses the common concepts in ISO27001 and ISO27002. Using this standard with the others in the ISO/IEC 27000 family will provide an effective framework for information security management.
   • Information security Treatment
     • Risk Asessement Result
     • Satisfactory Assessement
     • Risk Treatment Options
       • RIsk Modification
       • Risk Retention
       • Risk Avoidence
       • Risk Sharing
       • Residual Risk
     • Satiisfictory Treatment