InfoSec Risk Management best practice using ISO 27001 & 27005

ISO 27005

Firewalls Antivirus

Clusters

Test Environments

Backup/Restore

Standby Equipment

Virtual-anythingAlarm

Systems

Fire Extinguishers

Redundancy

Access Control

Standby Site

Server snapshots

Monitorering

Intrusion Detection

System Documentation

Policies & Procedures

Awareness

Change Management

Logging

Compliance

Service Level Agreements

Disaster RecoveryProcedures

Business Continuity Planning

Outsourcing Agreements

Contingency Plans

Intrusion prevention

(ISO 27001)