PECB CourseInformation SecurityIntermediateISO/IEC 27005ISO/IEC 27005 Risk Manager
Develop the competence to manage information security risks using ISO/IEC 27005 methodology and risk assessment techniques.
Course Description
The ISO/IEC 27005 Risk Manager training course enables you to develop the competence to master the risk management process related to information security. You will learn to establish, implement, and maintain a risk management program aligned with ISO/IEC 27005 guidelines, including risk assessment methodologies, risk treatment planning, and integration with the ISMS lifecycle. The course includes practical exercises using real-world risk scenarios to develop hands-on skills in conducting information security risk assessments.
Who Should Attend
- Information security risk managers
- ISMS managers needing to conduct risk assessments
- Security consultants advising on risk management
- Compliance officers responsible for risk-related activities
Learning Objectives
- 1Implement an information security risk management program based on ISO/IEC 27005
- 2Conduct comprehensive risk assessments using qualitative and quantitative methods
- 3Develop effective risk treatment plans aligned with organizational objectives
- 4Monitor and review risk management activities for continual improvement
Prerequisites
- A fundamental understanding of ISO/IEC 27005 and information security concepts
Course Modules
Day 1: Introduction to Risk Management and Context Establishment
ISO/IEC 27005 framework and process; risk management context; risk criteria definition; asset identification and valuation; and alignment with ISO/IEC 27001.
Day 2: Risk Assessment — Identification, Analysis, and Evaluation
Threat and vulnerability identification; risk analysis techniques (qualitative and quantitative); risk evaluation against criteria; risk prioritization; and practical risk assessment exercises.
Day 3: Risk Treatment, Monitoring, and Certification Exam
Risk treatment options (modify, retain, avoid, share); Statement of Applicability; risk acceptance; risk communication; monitoring and review; and the Risk Manager certification exam.
Exam Details
Duration
2 hours
Format
Multiple choice (60 questions), open book
Passing Score
70%
Retake Policy
Free retake within 12 months after first failure
Available in:
Certification
PECB Certified ISO/IEC 27005 Risk Manager
Issued by PECB
Digital Badge & Verification
Verified via Credly
Upon passing the exam, your certificate will be issued as a digital badge via Credly. This badge can be shared on LinkedIn, embedded in your email signature, and verified by anyone at any time.
Share this course
Related Courses
Continue your learning journey with these related courses.
ISO/IEC 27001 Foundation
Information Security
Learn the basic elements to implement and manage an Information Security Management System as specified in ISO/IEC 27001.
ISO/IEC 27001 Lead Implementer
Information Security
Lead the implementation of ISO/IEC 27001:2022 ISMS with expert knowledge in planning, risk assessment, control implementation, and certification audit preparation.
ISO/IEC 27001 Lead Auditor
Information Security
Develop the competence to audit an ISMS and manage audit teams by applying widely recognized audit principles, procedures, and techniques per ISO 19011.