Introduction In today’s rapidly evolving digital landscape, organizations face an ever-increasing array of threats that jeopardize the confidentiality, integrity, and availability of sensitive information. To address these challenges, the international standard ISO 27005 has emerged as a cornerstone for robust