Q: What is the ISO 27005 risk management process?
Ans: A risk management process based on ISO/IEC 27005 involves the establishment of an iterative risk assessment approach, implementation of risk treatment options, continual communication and consultation with interested parties, monitoring and review of the risk management process, and documentation of risk management .
Q: What is the ISO 27001 risk management policy?
Ans: An ISO 27001 risk management plan lets everyone in the business know the approach to risks and how they are managed. It sets out a standard approach and allows for the identification, quantification and management of business risk.