PECB Certified Course: ISO/IEC 27005:2022 Lead Risk Manager

Lead an information security risk-management framework from assessment through continual improvement.

This advanced course develops the ability to establish, operate and continually improve an information security risk-management framework based on ISO/IEC 27005. It covers risk identification, analysis, evaluation and treatment, communication and consultation, recording and reporting, monitoring and review, and established assessment methodologies used to support informed decisions.

Course at a glance

• Provider and awarding body: PECB.
• Learning format: PECB Self-Study (official course materials).
• Language: English.
• Level: Lead Manager.
• Examination and certification-application cycle: 12 months from purchase for the first examination attempt, the included free retake if needed, and the certification application.

What this course includes

• More than 450 pages of official PECB instructional materials containing explanations, guidance and practical examples.
• The first examination attempt and one free retake.
• The certification-application fee and the first year of the Annual Maintenance Fee, where applicable.
• A course-completion attestation worth 31 CPD credits, separate from the PECB professional credential.

What you will learn

After completing the course, the learner should be able to:

• explain risk-management principles based on ISO/IEC 27005 and ISO 31000;
• establish and continually improve a risk-management framework;
• apply assessment and treatment processes;
• plan communication, consultation, recording, reporting, monitoring and review.

Who this course is for

• Managers and consultants responsible for information security risk management.
• ISMS professionals, risk owners and privacy officers.
• Members of information security and IT teams.
• Project managers and advisers leading risk-management programmes.

Prerequisites: PECB expects a fundamental understanding of ISO/IEC 27005 and comprehensive knowledge of risk management and information security.

Course outline

• Introduction to ISO/IEC 27005 and information security risk management
• Risk identification, analysis, evaluation, and treatment based on ISO/IEC 27005
• Information security risk communication and consultation, recording and reporting, and monitoring and review
• Risk assessment methods
• Certification exam

Exam and credential pathway

The exam covers information security risk-management principles, programme implementation, assessment and treatment, communication and improvement, and risk-assessment methodologies.

Passing the examination enables an application to the applicable PECB ISO/IEC 27005 Risk Manager pathway. Higher designations require the specified professional and information-security risk-management experience, in addition to application and ethics requirements.

Course completion, examination success, certification application and credential issuance are separate stages; the credential is not issued automatically.

For official course details, see the PECB ISO/IEC 27005:2022 Lead Risk Manager page.

Access and activation

The 12-month period for the first examination, included free retake and certification application begins on the purchase date.

Each order covers one learner. Wadi Solutions begins processing the PECB registration within one business day, and activation details are sent to the learner's email. Required enrolment details are shared with PECB for activation.

Continue your learning path

• ISO/IEC 27005:2022 Foundation
• ISO/IEC 27005:2022 Risk Manager

Explore ISO/IEC 27005 — Information security risk courses to see the available options.

Before you buy

• If you do not have a myPECB account, create one here.
• If your myPECB email differs from the email used for your Wadi Solutions order, add your myPECB email to the order notes.