The Open Group, an organisation that works to promote IT standards, has launched a free guide to help organisations analyse and manage information risks. The guide is specifically aimed at ...

The ISO/IEC 27005:2018 standard, Information technology – Security techniques – Information security risk management, has been revised recently, according to the International Organization for ...

An IT governance specialist tells security pros about forthcoming updates to the influential ISO/IEC 27000 family of standards. (Part of the What Happens Next security predictions series.) Few doubt ...

Risk assessment (RA) is akin to charting the blueprint for a robust information security strategy. An information gathering exercise performed to determine the right steps to developing a proactive ...

Back in 2005, a new series of ISO standards made an appearance on the international stage of certifications (try to suppress the image of large wads of paper assembled in a Broadway kick line).