Introduction In the face of increasing cyber threats, organizations are compelled to adopt robust risk management frameworks to protect sensitive data and maintain business continuity. ISO 27005 serves as a powerful tool in this regard, offering guidelines that enable businesses