PECB ISO/IEC 27005 Risk Manager

This training course provides the knowledge and skills to identify, evaluate, analyze, treat, and communicate information security risks based on ISO/IEC 27005.

It also provides an overview of risk management concepts and principles outlined by ISO/IEC 27005 and ISO 31000, and introduces other risk assessment methods such as OCTAVE, MEHARI, EBIOS, NIST, CRAMM, and Harmonized TRA.

The ISO/IEC 27005 Risk Manager training course provides valuable information on risk management concepts and principles outlined by ISO/IEC 27005 and also ISO 31000. The training course provides participants with the necessary knowledge and skills to identify, evaluate, analyze, treat, and communicate information security risks based on ISO/IEC 27005.

Furthermore, the training course provides an overview of other best risk assessment methods, such as OCTAVE, MEHARI, EBIOS, NIST, CRAMM, and Harmonized TRA. The PECB ISO/IEC 27005 Risk Manager certification demonstrates that you comprehend the concepts and principles of information security risk management.

The training course is followed by an exam. After passing the exam, you can apply for the “PECB Certified ISO/IEC 27005 Risk Manager” credential.

• Managers or consultants involved in or responsible for information security in an organization
• Members of information security teams, IT professionals, and privacy officers
• Individuals responsible for managing information security risks
• Individuals responsible for maintaining conformity with the information security requirements of ISO/IEC 27001 in an organization
• Project managers, consultants, or expert advisers seeking to master the management of information security risks

The “PECB Certified ISO/IEC 27005 Risk Manager” exam meets all the requirements of the PECB Examination and Certification Program (ECP). It covers the following competency domains: Domain 1: Fundamental principles and concepts of information security risk management; Domain 2: Implementation of an information security risk management program; Domain 3: Information security risk management framework and processes based on ISO/IEC 27005; Domain 4: Other information security risk assessment methods.

• Explain the risk management concepts and principles outlined by ISO/IEC 27005 and ISO 31000
• Establish, maintain, and improve an information security risk management framework based on ISO/IEC 27005
• Apply information security risk management processes based on the guidelines of ISO/IEC 27005
• Plan and establish risk communication and consultation activities

• Section 1: Training course objectives and structure
• Section 2: Standards and regulatory frameworks
• Section 3: Fundamental concepts and principles of information security risk
• Section 4: Information security risk management program
• Section 5: Context establishment
• Section 6: Risk identification
• Section 7: Risk analysis
• Section 8: Risk evaluation
• Section 9: Risk treatment
• Section 10: Information security risk communication and consultation
• Section 11: Information security risk recording and reporting
• Section 12: Information security risk monitoring and review
• Section 13: OCTAVE and MEHARI methodologies
• Section 14: EBIOS method and NIST framework
• Section 15: CRAMM and TRA methods
• Section 16: Closing of the training course

After successfully passing the exam, you can apply for one of the credentials below. You will receive the certificate once you comply with all the requirements related to the selected credential.

• Certificate and examination fees are included in the price of the training course.
• Participants of the training course will receive over 350 pages of training materials, containing valuable information and practical examples.
• Participants of the training course will receive an attestation of course completion worth 21 CPD (Continuing Professional Development) credits.
• Participants who have completed the training course and failed to pass the exam are eligible to retake it once for free within a 12-month period from the initial date of the exam.

Credential requirements summary

Note: PECB Certified individuals who possess several credentials are eligible for a reduction on the annual maintenance fees. For more information, please contact PECB.

The ISO/IEC 27005 Risk Manager eLearning training course is delivered on the MyPECB platform. It becomes available after you log in using your PECB account. In addition to having the training course content in video format, you can also access the regular training course materials format, structured in training course days, with additional files available in an editable format (depending on the training course, the case study, exercises, and exercises correction key files will also be available). Quizzes are part of the training course to increase interactivity between attendants and the training material.

• Take the training course
• Access the materials on MyPECB
• Enter the exam at your most convenient date, time, and location via PECB Exams

PECB's eLearning training courses have been designed to meet the needs of diverse learners who have different learning preferences and/or limited time to attend a training course session. Here are some of the main benefits of the PECB eLearning experience:

• Both the training course and the examination are conducted fully online. Thus, all you need is an electronic device and internet access.
• The training course is available 24/7, so you can adapt your study pace, time, and location to your schedule instead of having to adapt your schedule to the training course.
• The unlimited access allows you to go back to any section of the training course as needed.
• Every training course consists of several video sections.