STANDARDS AS/NZS ISO/IEC 27005:2024 STANDARDS NEWZEALAND TEMANATAUTIKANGAOAOTEAROA Australia ISO/IEC 27005:2022 Australian/New Zealand Standard TM Information security, cybersecurity and privacy protection Guidance on managing information security risks AS/NZS ISO/IEC 27005:2024 This Joint Australian/New Zealand StandardTM was prepared by Joint Technical Committee IT-012, Information security, cybersecurity and privacy protection. It was approved on behalf of Standards Australia's Standards Development and Accreditation Committee on 08 November 2024 and by the New Zealand Standards Approval Board on 02 October 2024. This Standard was published on 22 November 2024. The following are represented on Committee IT-012: Australasian Society for Computers and Law Australian Industry Group Australian Information Industry Association Australian Information Security Association Australian Security Industry Association Business Continuity Institute Australasia Consumers' Federation of Australia CSIRO Cyber Security Cooperative Research Centre Department of Defence (Australian Government) Department of Internal Affairs Energy Networks Australia Engineers Australia ISACA Melbourne Joint Accreditation System of Australia & New Zealand Ministry of Business, Innovation and Employment (MBIE) Monash University Office of the Victorian Information Commissioner University of Waikato University of Wollongong This Standard was issued in draft form for comment as DR AS/NZS ISO/IEC 27005:2024. Keeping Standards up-to-date Ensure you have the latest versions of our publications and keep up-to-date about Amendments, Rulings, Withdrawals, and new projects by visiting: www.standards.org.au www.standards.govt.nz ISBN 978 1 76139 912 1 AS/NZS ISO/IEC 27005:2024 ISO/IEC 27005:2022 Australian/New Zealand StandardTM Information security, cybersecurity and privacy protection Guidance on managing information security risks Originated as HB 231:2000. Previous edition HB 231:2004 Jointly revised and redesignated as AS/NZS ISO/IEC 27005:2012. Second edition 2024. COPYRIGHT Standards Australia Limited/Standards New Zealand 2024 All rights are reserved. No part of this work may be reproduced or copied in any form or by any means, electronic or mechanical, including photocopying, without the written permission of the publisher, unless otherwise permitted under the Copyright Act 1968 (Cth) or the Copyright Act 1994 (New Zealand),