Get in Touch
 Duration 21 hours

Course Outline

Learning objectives 
Upon successfully completing this training course, you will be able to:
  • Describe the risk management concepts and principles defined by ISO/IEC 27005:2022 and ISO 31000
  • Develop, maintain, and enhance an information security risk management framework aligned with ISO/IEC 27005:2022 guidelines
  • Implement information security risk management processes in accordance with ISO/IEC 27005:2022
  • Plan and execute risk communication and consultation activities
Day 1:

Introduction to ISO/IEC 27005:2022 and risk management
 

  • Course objectives and structure
  • Relevant standards and regulatory frameworks
  • Core concepts and principles of information security risk management
  • Information security risk management program components
  • Establishing organizational context
Day 2:
Risk assessment, risk treatment, and risk communication/consultation based on ISO/IEC 27005:2022
  • Identifying risks
  • Analyzing risks
  • Evaluating risks
  • Treating risks
  • Communication and consultation regarding information security risks
Day 3:
Risk recording/reporting, monitoring/review, and risk assessment methodologies
  • Recording and reporting information security risks
  • Monitoring and reviewing information security risks
  • OCTAVE and MEHARI methodologies
  • EBIOS method and NIST framework
  • CRAMM and TRA methods
  • Course conclusion

PECB ISO/IEC 27005 Risk Manager Certification Requirements

To obtain the PECB ISO/IEC 27005 Risk Manager designation, candidates must successfully pass the PECB Certified ISO/IEC 27005 Risk Manager exam (or an approved equivalent) and formally sign the PECB Code of Ethics.

Based on your professional background and hands-on risk assessment experience, you may apply for one of the following credential levels:

1. Provisional Risk Manager

  • Credential Title: PECB Certified ISO/IEC 27005 Provisional Risk Manager

  • Professional Experience: No prior experience required.

  • Risk Management Experience: No prior experience required.

  • Best Suited For: Candidates who have passed the exam but have not yet fulfilled the required field work or active hours for full certification.

2. Risk Manager

  • Credential Title: PECB Certified ISO/IEC 27005 Risk Manager

  • Professional Experience: Two years of general professional experience, including at least one year dedicated to Information Security Risk Management.

  • Risk Management Experience: A cumulative minimum of 200 hours of active information security risk management activities.

https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27005/iso-iec-27005-risk-manager

Requirements

This training course is designed for:
  • Managers or consultants who oversee or are responsible for information security within an organization
  • Professionals tasked with managing information security risks
  • Members of information security teams, IT specialists, and privacy officers
  • Individuals responsible for ensuring compliance with ISO/IEC 27001 information security requirements
  • Project managers, consultants, or expert advisers aiming to excel in information security risk management

Number of participants


Price per participant

Testimonials (4)

Upcoming Courses

Related Categories