Course Outline
- Describe the risk management concepts and principles established in ISO/IEC 27005:2022 and ISO 31000
- Create, maintain, and enhance an information security risk management framework in line with ISO/IEC 27005:2022 guidelines
- Implement information security risk management processes following the directives of ISO/IEC 27005:2022
- Plan and execute risk communication and consultation activities
Introduction to ISO/IEC 27005:2022 and Risk Management
- Course objectives and structure
- Relevant standards and regulatory frameworks
- Core concepts and principles of information security risk management
- The information security risk management program
- Establishing the context
- Identifying risks
- Analyzing risks
- Evaluating risks
- Treating risks
- Communicating and consulting on information security risks
- Recording and reporting information security risks
- Monitoring and reviewing information security risks
- OCTAVE and MEHARI methodologies
- The EBIOS method and NIST framework
- CRAMM and TRA methods
- Course conclusion
PECB ISO/IEC 27005 Risk Manager Certification Requirements
To earn the PECB ISO/IEC 27005 Risk Manager designation, all candidates must successfully pass the PECB Certified ISO/IEC 27005 Risk Manager exam (or an approved equivalent) and formally adhere to the PECB Code of Ethics.
Based on your professional background and experience in risk assessment, you may qualify for one of two credential levels:
1. Provisional Risk Manager
-
Credential Title: PECB Certified ISO/IEC 27005 Provisional Risk Manager
-
Professional Experience: No prior experience required.
-
Risk Management Experience: No specific hours required.
-
Best Suited For: Individuals who have passed the exam but have not yet completed the fieldwork or active hours necessary for full certification.
2. Risk Manager
-
Credential Title: PECB Certified ISO/IEC 27005 Risk Manager
-
Professional Experience: Two years of general professional experience, including at least one year dedicated to Information Security Risk Management.
-
Risk Management Experience: A cumulative minimum of 200 hours of active information security risk management activities.
https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27005/iso-iec-27005-risk-manager
Requirements
- Managers or consultants involved in, or responsible for, organizational information security
- Professionals tasked with managing information security risks
- Information security team members, IT specialists, and privacy officers
- Individuals responsible for ensuring compliance with the information security requirements of ISO/IEC 27001 within an organization
- Project managers, consultants, or subject matter experts aiming to master information security risk management
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 4350 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
I enjoyed the quizzes, and Driton's style of teaching.
Chloe - SEEC MM Ltd.,
Course - ISO 9001 Lead Implementer
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
