Math approach of implementing ISO 27001

Abstract

The objective of this paper work is to create a mathematical approach that can quantify the need of implementing the ISO 27001 in a company and the actual benefits of doing so. The scope is to identify the factors that determine vulnerabilities, what damages are caused by these factors, the risk and impact level of the factors. The approach is from the point of view of costs caused by implementing the standard compared with costs of potential damage by not implementing.