Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Does ISO/IEC 27001 define the methodology for risk assessment?

April 26, 2017assessment define IEC ISO methodology risk

0

Posted

Does ISO/IEC 27001 define the methodology for risk assessment?

1 Answer

0

Posted

The standard specifies only that the organization should use a systematic approach to risk assessment (method of risk assessment, legal requirements, policies, and objectives for reducing the risks to an acceptable level). A specific methodology is not prescribed.