Abstract
Effective risk management is crucial for businesses to mitigate a wide array of threats. This paper conducts a bibliometric analysis of information security risk management literature spanning two decades, from 2000 to early 2025. Using the Web of Science (WoS) database, 418 English-language journal articles were reviewed. Visualizations using VOS viewer and Power BI offer insights into publication trends, co-citations, keywords, authors, journals and contributing countries. The analysis identifies four thematic clusters reflecting key areas in information security risk management research. The findings highlight significant growth in this field over the past 25 years, with expectations for continued international expansion and knowledge advancement.