All types Page Article White Paper Download
Solutions The best route to security compliance
Hicomply Privacy™ ISO 27001 ISO 9001 ISO 14001 SOC 2 NHS DSPT NIST 800-53 Hicomply GRC™ Services & Customer Support
Platform A powerful suite of ISMS features
Dashboard ISMS Scoping Policy Management Risk Management Information Asset Management Task Management Integrations Hicomply for Enterprises Trust Centre Controls Monitor Hicomply AI
Resources Everything you need to know
Knowledge & Insights Resources Hub Case Studies Sectors Glossary News ROI Calculator
Knowledge Base Learn more about infosec
ISO 27001 Knowledge Base SOC 2 Knowledge Base NHS DSPT Knowledge Base PCI DSS Knowledge Base NIST 800-53 Knowledge Base
Company Security and customers first
About News Partners Careers Contact

ISO 27001 Clause 8.2: Information Security Risk Assessment

Read the requirements of ISO 27001 Clause 8.2: Information Security Risk Assessment, which details what the risk assessment should include. As with clause 8.1, this clause should be completed automatically if an organisation has successfully fulfilled the requirements for clauses 6.1, 6.2 and 7.5


What is ISO 27001 Clause 8.2: Information Security Risk Assessment?

ISO 27001 Clause 8.2: Information Security Risk Assessment requires organisations to conduct information security risk assessments as determined in clause 6.1.2 at planned intervals or when any significant change is proposed in the ISMS.

The information security risk assessment is designed to assess threats and vulnerabilities to the organisation. This step helps senior leadership to factually assess the organisation’s situation and treat the risks accordingly. The organisation must perform information security risk assessments at regular intervals to fulfil the continual improvement element of ISO 27001 and must keep these information security risk assessment reports in a documented form.