ISO 27005:2022 is an international standard that provides information security risk management guidelines. It’s part of the ISO 27000 series of standards, which provide guidelines and best practices for information security management. The standard was published in September 2022 and replaces the previous version, ISO 27005:2011.

It provides updated guidance on identifying, assessing, and managing information security risks and integrating risk management into an organization's overall information security management system (ISMS). It also includes new sections on risk assessment methodologies, risk treatment, and risk reporting. ISO 27005:2022 is intended to help organizations effectively manage their information security risks and protect their sensitive information.