companies Ebios RA/ RM Qualitative Based on Type 2 Low Standard Free Yes / Free ISO/IEC agencies, security 27001:2005, needs Large ISO/IEC companies, 27002:2005, SME ISO/IEC RA/ RM Qualitative Based on Type 5 Low Low Standard Free Yes / ISO/IEC agencies, open 27001:2005, damage ISO/IEC scenarios companies, 27002:2005 SME MAGERIT RA/ RM Based on Type 5 Low Low ITC Free Yes / ISO/IEC agencies, / open Experts 27001:2005, Qualitative damage Large ISO/IEC scenarios companies, SME ISO/IEC 27005:2008 MEHARI RA/ RM Qualitative Based on Type 1 Low Low ITC Commercial Yes / ISO/IEC agencies fixed Experts 27001:2005, Free
companies Ebios agencies, Large companies, SME RA/ RM Qualitative Based on security needs Type 2 Low Standard Free Yes / Free ISO/IEC 27001:2005, ISO/IEC 27002:2005, ISO/IEC agencies, companies, SME RA/ RM Qualitative Based on open damage scenarios Type 5 Low Low Standard Free Yes / ISO/IEC 27001:2005, ISO/IEC 27002:2005 MAGERIT agencies, Large companies, SME RA/ RM / Qualitative Based on open damage scenarios Type 5 Low Low ITC Experts Free Yes / ISO/IEC 27001:2005, ISO/IEC ISO/IEC 27005:2008 MEHARI agencies RA/ RM Qualitative Based on fixed Type 1 Low Low ITC Experts Commercial Yes / Free ISO/IEC 27001:2005,
D2.1_UPRC.docx