The ISO 27005 risk management methodology standard has weaknesses when it comes to risk measurement. "Fuzzy math" theory can help fill the gaps. ISO 27005, issued in 2005, filled a noticeable gap in ...