ISO/IEC 27005 is the standard dedicated to information security risk management. It provides guidelines for information security risk management and supports the general concepts specified in ISO/IEC 27001. It is designed to assist the implementation of information security based on a risk management approach and is applicable to all types of organizations which intend to manage risks that can compromise the organization's information security.