Course Outline
- Articulate the risk management concepts and principles established by ISO/IEC 27005:2022 and ISO 31000
- Design, sustain, and enhance an information security risk management framework aligned with ISO/IEC 27005:2022 guidelines
- Implement information security risk management processes in accordance with ISO/IEC 27005:2022 standards
- Develop and initiate risk communication and consultation strategies
Introduction to ISO/IEC 27005:2022 and Risk Management
- Course objectives and structural overview
- Relevant standards and regulatory frameworks
- Core concepts and principles of information security risk management
- Developing an information security risk management program
- Establishing organizational context
- Identifying risks
- Conducting risk analysis
- Evaluating risks
- Implementing risk treatment strategies
- Facilitating information security risk communication and consultation
- Recording and reporting information security risks
- Monitoring and reviewing information security risks
- OCTAVE and MEHARI methodologies
- EBIOS method and the NIST framework
- CRAMM and TRA methods
- Course wrap-up
PECB ISO/IEC 27005 Risk Manager Certification Requirements
To obtain the PECB ISO/IEC 27005 Risk Manager designation, candidates must successfully pass the PECB Certified ISO/IEC 27005 Risk Manager examination (or an approved equivalent) and formally accept the PECB Code of Ethics.
Based on your professional background and hands-on experience in risk assessment, you may apply for one of two credential levels:
1. Provisional Risk Manager
-
Credential Title: PECB Certified ISO/IEC 27005 Provisional Risk Manager
-
Professional Experience: Not required.
-
Risk Management Experience: Not required.
-
Ideal For: Individuals who have passed the examination but have not yet fulfilled the field work or active hour requirements for full certification.
2. Risk Manager
-
Credential Title: PECB Certified ISO/IEC 27005 Risk Manager
-
Professional Experience: A minimum of two years of overall professional experience, including at least one year dedicated to Information Security Risk Management.
-
Risk Management Experience: A cumulative total of at least 200 hours of active information security risk management activities.
https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27005/iso-iec-27005-risk-manager
Requirements
- Managers or consultants who play a key role in or are accountable for organizational information security
- Professionals tasked with overseeing information security risks
- Members of information security teams, IT specialists, and privacy officers
- Individuals responsible for ensuring organizational compliance with ISO/IEC 27001 information security requirements
- Project managers, consultants, or subject matter experts aiming to excel in information security risk management
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 3900 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
I enjoyed the quizzes, and Driton's style of teaching.
Chloe - SEEC MM Ltd.,
Course - ISO 9001 Lead Implementer
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
