PECB CourseInformation SecurityIntermediateEBIOSEBIOS Risk Manager
Master the EBIOS Risk Manager methodology developed by ANSSI for comprehensive, workshop-based cybersecurity risk assessment.
Course Description
The EBIOS Risk Manager training course enables you to acquire the expertise to master the EBIOS Risk Manager methodology developed by ANSSI (French National Cybersecurity Agency). EBIOS (Expression des Besoins et Identification des Objectifs de Sécurité) is a comprehensive, workshop-based risk assessment methodology structured around five workshops: scope and security baseline, risk origins, strategic scenarios, operational scenarios, and risk treatment. This methodology is widely used in France and increasingly adopted in Europe for cybersecurity risk assessment.
Who Should Attend
- Risk managers working with French or European organizations
- Information security officers implementing EBIOS
- Security consultants advising on ANSSI-aligned risk management
- Compliance professionals in regulated industries
Learning Objectives
- 1Master the EBIOS Risk Manager methodology and its five workshops
- 2Conduct cybersecurity risk assessments using the EBIOS framework
- 3Develop strategic and operational risk scenarios
- 4Create risk treatment strategies aligned with ANSSI guidelines
Prerequisites
- A fundamental understanding of risk management concepts
- Knowledge of information security fundamentals
Course Modules
Day 1: EBIOS Methodology and Workshops 1-2
EBIOS Risk Manager framework introduction; Workshop 1: Scope and security baseline — defining the perimeter, identifying business assets and supporting assets; Workshop 2: Risk origins — identifying feared events and threat sources.
Day 2: EBIOS Workshops 3-5
Workshop 3: Strategic scenarios — mapping attack paths from threat sources to business assets; Workshop 4: Operational scenarios — detailing technical attack scenarios; Workshop 5: Risk treatment — defining security measures and residual risk acceptance.
Day 3: Implementation, Monitoring, and Certification Exam
Applying EBIOS results to organizational security; continuous risk monitoring; integrating EBIOS with ISO/IEC 27001 risk management; and the PECB Certified EBIOS Risk Manager certification examination.
Exam Details
Duration
3 hours
Format
Mixed multiple choice and essay-type questions (60 questions), open book
Passing Score
70%
Retake Policy
Free retake within 12 months after first failure
Available in:
Certification
PECB Certified EBIOS Risk Manager
Issued by PECB
Digital Badge & Verification
Verified via Credly
Upon passing the exam, your certificate will be issued as a digital badge via Credly. This badge can be shared on LinkedIn, embedded in your email signature, and verified by anyone at any time.
Share this course
Related Courses
Continue your learning journey with these related courses.
ISO/IEC 27001 Foundation
Information Security
Learn the basic elements to implement and manage an Information Security Management System as specified in ISO/IEC 27001.
ISO/IEC 27001 Lead Implementer
Information Security
Lead the implementation of ISO/IEC 27001:2022 ISMS with expert knowledge in planning, risk assessment, control implementation, and certification audit preparation.
ISO/IEC 27001 Lead Auditor
Information Security
Develop the competence to audit an ISMS and manage audit teams by applying widely recognized audit principles, procedures, and techniques per ISO 19011.