文档介绍：INTERNATIONAL ISO/lEe
STANDARD 27005
First edition
2008-06·15
Information technology - Security
techniques - Information security risk
management
Technologies de I'information - Techniques de securite - Gestion du
risque en securite de I'information
Reference number
ISO/IEC 27005:2008(E)
© ISOIIEC 2008
ISO/IEC 27005:2008(E)
PDF disclaimer
This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but
shall not be edited unless the typefaces which are embedded are licensed to and installed on puter performing the editing. In
downloading this file, parties accept therein the responsibility of not infringing Adobe's licensing policy. The ISO Central Secretariat
accepts no liability in this area.
Adobe is a trademark of Adobe Systems Incorporated.
Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation
parameters were optimized for printing. Every care has been taken to ensure that the file Is suitable for use by ISO member bodies, In
the unlikely event that a problem relating to it is found, please Inform the central Secretariat at the address given below.
~:.i' COPYRIGHT PROTECTED DOCUMENT
e ISO/IEC 2008
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means,
electronic or mechanical, including photocopying and microfilm, without permission In writing from either ISO at the address below or
ISO's member body in the country of the requester.
ISO copyright office
Case postale 56. CH-1211 Geneva 20
Tel. +41227490111
Fax + 41 22 7490947
E-mail eopyright@
Web
Published in Switzerland
ii © ISOIIEC 2008 - All rights reserved
ISOllEe 27005:2008(E)
Contents Page
Foreword v
Introduction vi
1 Scope 1
2 Normative references 1
3 Terms and definitions 1
4 Structure of this International