this first edition of iso/ iec 27005 cancels and replaces iso/ iec tr: 1998, and iso/ iec tr:, of which it constitutes a technical revision. iso/ iec 27005 is developed on account of helping organizations improve the information security risk. whereas clause 8 of iso/ iec 2