An AI-Supported Reference Process for Risk Management in Accordance with ISO 27005
An AI-Supported Reference Process for Risk Management in Accordance with ISO 27005
Author(s): Sebastian GrünebergSubject(s): Economy, Business Economy / Management, ICT Information and Communications Technologies, Socio-Economic Research
Published by: Университет по библиотекознание и информационни технологии
Keywords: ISO 27005; Artificial Intelligence; Information Security Risk Management; Large-Language-Models (LLM); Reference Process
Summary/Abstract: The increasing complexity of information security risks creates significant challenges for organizations in risk management. ISO 27005 provides a normative framework but does not explicitly specify how to implement individual process phases methodologically. While the use of artificial intelligence (AI) in risk management is gaining attention, consistent process-oriented integration has yet to be achieved. This article explores how to systematically integrate AI into the risk management process in accordance with ISO 27005 to ensure compliance with standards. Through document analysis of the standard and a systematic literature review, an AI-supported reference process was developed that positions AI support functions across all process phases and establishes clear decision and validation points. The findings indicate that AI is mainly useful for organizing and analyzing risk-related information, while humans retain responsibility for decisions with normative implications.
Journal: Образование, научни изследвания и иновации
- Issue Year: IV/2026
- Issue No: 2
- Page Range: 134-142
- Page Count: 9
- Language: English
