ISO/IEC 27005 Foundation case studies
ISO/IEC 27005 Foundation · Put your knowledge to work in context.
The ISO/IEC 27005 Foundation credential is an entry-level certificate offered by PECB for individuals who want to demonstrate general knowledge of the information security risk management guidelines published in ISO/IEC 27005. It is aimed at risk management professionals, staff who manage information security risks within their own area of responsibility, people who simply want to become familiar with the standard's guidance, and anyone considering a career in information security risk management. The ISO/IEC 27005 Foundation case studies are 5 cases and about 3,106 words.
1Case 1 - 212 Entries, One Colour: When the Register Cannot Be Evaluated
Meridian Insurance Brokers employs 600 staff across three offices and holds personal data on 1.2 million policyholders. Its risk register contains 212 entries.
634 words, about 3 min2Case 2 - Ninety Days to Justify a SCADA Refresh
Northvale Water operates 220 pumping stations and a SCADA estate that has passed end-of-support. The regulator has set a 90-day deadline to submit a risk assessment supporting a £2.3 million refresh.
641 words, about 3 min3Case 3 - The Risk That Was 'Transferred' and Closed
Harlow & Finch is an online retailer with €85 million turnover. It outsources card processing to a payment service provider (PSP) under a contract with a 99.9% availability SLA, a €2 million liability cap and a cyber-insurance policy covering the retailer's own losses up to €5 million.
627 words, about 3 min4Case 4 - A Low Rating That Outlived Its Assumption
Ashcombe University last performed an information security risk assessment 26 months ago, before it migrated its learning platform to a cloud provider. Under its methodology, low-rated risks are reviewed every three years.
606 words, about 3 min5Case 5 - Three Registers, Three Scales, One Board Paper
Kestrel Logistics Group has a head office and three country units (Poland, Spain, Vietnam). Each unit runs its own risk register.
598 words, about 3 min