ISO 27005 standard is dedicated to information security Risk Management. It explicitly targets risks related to information assets' confidentiality, integrity, and availability.
ISO/IEC 27001 describes a general process for the ISMS, and in that context ISO/IEC 27005 defines the approach to managing risk. FAIR provides a methodology for analyzing risk.