Risk management according to ISO/IEC 27001, with a focus on risk assessment, risk treatment, and systematic analysis of threats and vulnerabilities in information assets. Covers qualitative and quantitative assessment methodologies, risk appetite definition, Annex A control selection, and Statement of Applicability (SoA) documentation for ISMS certification.