ISO/IEC 27005 Risk Manager

Build the expertise to manage an information security risk management process and help your organisation identify, assess and treat information security risk.

Duration: 3 days of content
Exam: 2 hours, online
CPD credits: 21
Level: Manager / Specialist
Delivery: eLearning, live online or in-house

Official PECB course, enrolled through GGG, an authorised PECB partner

Course overview

The ISO/IEC 27005 Risk Manager course gives you the knowledge and practical methods to manage an information security risk management process. You learn how to set the context, apply the right frameworks, make and document decisions, and report clearly to leadership, so that the discipline is run with rigour rather than good intentions.

Who should attend

Professionals who own or run this discipline
Managers who report on it to executives or the board
Advisers and consultants in the field
People moving into the role from a related function

Why take this certification

Every ISO/IEC 27001 control decision rests on a sound risk assessment. ISO/IEC 27005 shows you how to run one that stands up.

Learning objectives

Explain the principles and frameworks behind the information security risk management process
Establish context, roles and governance for the discipline
Apply practical methods to assess, decide and act
Monitor, report and improve, and communicate with leadership

Course structure

1Day 1: Principles, framework and context of the information security risk management process

Covered in the PECB course materials, with exercises and quizzes to test your understanding.

2Day 2: Identification, analysis and evaluation

Covered in the PECB course materials, with exercises and quizzes to test your understanding.

3Day 3: Treatment, monitoring and reporting, then the certification exam

The PECB Certified ISO/IEC 27005 Risk Manager exam is a 2-hour exam that tests your understanding of the course competencies. You sit it online through PECB, on the last day of the course or at a time you schedule afterwards.

Examination

Exam retake

If you do not pass the first time, you can retake the exam once for free within 12 months of your first attempt.

Certification pathway

Passing the exam earns the PECB Certified ISO/IEC 27005 Risk Manager credential, with higher grades available as your professional experience grows.

Certification pathways

Prerequisites

No formal prerequisite. Some working experience in the field is helpful.

Delivery method

Self-paced eLearning on myPECB, studied at your own pace
Live online classes with a PECB-certified trainer, on request
In-house delivery for teams, on request

How PECB eLearning works

What’s included

PECB course materials (about 3 days of content)
The certification exam and the first-year certification fee
A certificate of completion worth 21 CPD credits
A free exam retake if you need one
Enrolment support from GGG from start to certificate

Frequently asked questions

How long do I have to complete the eLearning?

Access to the course runs for 12 months from activation, so you can study around work and schedule the exam when you are ready.

Is the exam included in the fee?

Yes. The exam, one free retake and the first-year certification fee are included.

Can my employer pay?

Yes. Choose to be invoiced when you send your enrolment and GGG issues the invoice to your organisation.

Can I enrol a team?

Yes. Corporate enrolments are handled by GGG, with in-house or live online delivery for groups.

Is the course available in French?

Many PECB courses and exams are offered in French and other languages. Tell us your preferred language when you enrol and we confirm availability.

Course details follow PECB’s standard format for this certification. GGG confirms the current schedule, language options and fee when you enrol.