Skip to content
AfriScienceGroup home
Cybersecurity and IT

Applying ISO/IEC 27005 to Information Security Risk

This course covers information security risk management following the ISO/IEC 27005 approach, within the wider ISO/IEC 27001 management system. Delegates work through establishing context and risk criteria, asset and threat identification, vulnerability assessment, risk analysis and evaluation, and treatment selection against a control set. Practical emphasis is on producing a risk assessment that supports decisions rather than one that fills a folder, including the treatment of residual risk acceptance and the documentation an auditor will expect. Delegates carry an assessment through the full cycle on a realistic scope.

5 day courseRegister NowRequest Proposal

Course objectives

  • Establish context, scope and risk criteria for an assessment
  • Identify assets, threats and vulnerabilities systematically
  • Analyse and evaluate risk consistently against defined criteria
  • Select and justify risk treatment against a control set
  • Document residual risk and obtain informed acceptance
  • Produce documentation that satisfies an auditor
  • Maintain the assessment as the environment changes

Who should attend

  • Information security managers and officers
  • IT risk and compliance professionals
  • Internal auditors covering information security
  • Management system practitioners
  • Technology managers implementing ISO/IEC 27001

Course outline

  1. 01The risk management process within a management system
  2. 02Context, scope and risk criteria
  3. 03Asset identification and valuation
  4. 04Threat and vulnerability identification
  5. 05Risk analysis and evaluation
  6. 06Treatment selection and control justification
  7. 07Residual risk and informed acceptance
  8. 08Documentation, audit evidence and maintenance

Scheduled sessions

Scheduled sessions for Applying ISO/IEC 27005 to Information Security Risk
DatesVenueFormatPriceRegister
9 to 13 November 2026Pretoria, South AfricaClassroomR19,950 per delegateRegister Now
23 to 27 November 2026Lagos, NigeriaClassroomUSD 1,325 per delegateRegister Now
11 to 15 January 2027Cape Town, South AfricaClassroomR19,950 per delegateRegister Now
22 to 26 February 2027Harare, ZimbabweClassroomUSD 1,325 per delegateRegister Now

Applying ISO/IEC 27005 to Information Security Risk

From R19,950

AskRegister