Aegentra
UK
United KingdomAustraliaNew Zealand

PECB / Risk Manager

ISO/IEC 27005 Risk Manager
Course & exam bundle.

Information security risk management based on ISO/IEC 27005 — plus OCTAVE, MEHARI, EBIOS, NIST, CRAMM, and Harmonized TRA.

Compare learning formatsExplore the curriculum

Online · Self-paced · English

Verify PECB partner ID 232290

Course and exam, together

Choose your learning format.

Compare the course formats and their inclusions. Choose a bundle to pay securely on Stripe. Stripe asks for your email, which we use to assign your PECB course.

Self-Study course and exam bundle

Read and revisit the official slide-based materials at your own pace. No video lectures or live teaching.

What’s included
  • 12 months of myPECB course access
  • Official PECB course slides
  • Official PECB exam voucher: 2 attempts — initial exam + one free retake if needed
  • Certification application fee included
  • First-year certification maintenance fee included where applicable

Base price (excl. VAT)£443.35

Total to pay (incl. 20% UK VAT)£532.02

Per learner · GBP

Buy

PECB eLearning course and exam bundle

Learn at your own pace with recorded video teaching alongside the official course slides.

What’s included
  • 12 months of myPECB course access
  • Official PECB course slides
  • Recorded PECB video lectures
  • Official PECB exam voucher: 2 attempts — initial exam + one free retake if needed
  • Certification application fee included
  • First-year certification maintenance fee included where applicable

Base price (excl. VAT)£537.57

Total to pay (incl. 20% UK VAT)£645.08

Per learner · GBP

Buy
Exam and purchase conditions

Complete the exam, included retake and application within 12 months of purchase. The first retake requires at least 15 days after an unsuccessful attempt. PECB reviews eligibility before awarding a credential; buying a bundle does not guarantee certification. An enquiry does not create an order. An order is confirmed after successful payment and acceptance.

Choose your payment currency in the top navigation. Prices shown are for UK personal purchases; other locations and business purchases need a written quote.

Your enrolment

ISO/IEC 27005 Risk Manager

Total payable in GBP

—

Order details

Your selected course

    The badge identifies the course, not a credential already earned. One-off payment; no automatic renewal. Any valid promotion is applied on Stripe’s final payment screen.

    PECB access within 24 hours of confirmed payment.

    Purchase and billing details

    Base prices exclude VAT; the UK total adds 20% VAT. Outside the UK? Request a written quote confirming applicable tax and your total before payment. Payment currency does not determine tax.

    UK prices are fixed in GBP. Other currencies use a current exchange quote; your selected currency is charged at checkout.

    This does not remove remedies for faulty or misdescribed content, rights relating to examination services, or the 10-day Labs money-back guarantee.

    Examination services are separate from digital-content access. Accepting early digital access does not waive service cancellation rights. Any request to start an examination service during the cancellation period is handled separately.

    PECB courses have no additional voluntary cancellation refund. This does not remove statutory rights. Labs has the separate 10-day guarantee.

    You need your email account, an internet connection and compatible equipment; check the course and PECB examination requirements before paying.

    Prefer to start after the cancellation period? Arrange a later start with the Academy before payment.

    You can review and correct this order before continuing. Stripe handles card details; we do not receive your full card number. Checkout and purchase information are in English. Save the terms.

    Loading your course and total…

    Personal purchases only. Business or reverse-charge request? Contact us before paying.

    Is this your next step?

    Who this course
    suits best.

    • Managers or consultants responsible for information security in an organisation
    • Individuals responsible for managing information security risks
    • Members of information security teams, IT professionals, and privacy officers
    • Individuals maintaining conformity with the information security requirements of ISO/IEC 27001
    • Project managers, consultants, and expert advisers seeking to master information security risk management

    People behind the recorded lessons

    Meet the PECB
    eLearning presenters.

    PECB names these presenters in its English eLearning brochure, checked 18 October 2026. These are recorded lessons, not Aegentra staff profiles or a booking with a live trainer. The line-up can change with the language or course edition.

    PECB recorded-course presenter

    Graeme Parker

    PECB recorded-course presenter across information security, AI management, privacy and risk. His courses connect management-system concepts with implementation and audit.

    View the PECB course brochure (PDF)

    PECB recorded-course presenter

    Andro Kull

    His PECB contributor profile describes experience in IT audit, risk management and information security.

    Read the PECB profile

    Check the presenter list in the official brochure (PDF)

    Which learning support is included?

    Self-Study is independent learning from the official materials. eLearning, where listed, adds recorded instruction; neither standard bundle promises live tuition or unlimited one-to-one support. For the listed ISO 27001 and ISO 42001 courses, the separately quoted consultancy option is explained above. PECB manages examination and certification decisions.

    Knowledge you can apply

    What you will
    work through.

    • Explain the risk management concepts and principles outlined by ISO/IEC 27005 and ISO 31000.
    • Establish, maintain, and improve an information security risk management framework based on the guidelines of ISO/IEC 27005.
    • Apply information security risk management processes based on the guidelines of ISO/IEC 27005.
    • Plan and establish risk communication and consultation activities.
    • Select an appropriate assessment method — OCTAVE, MEHARI, EBIOS, NIST, CRAMM, or Harmonized TRA — for the organisation in front of you.

    Inside the course

    The curriculum.

    Modules describe the learning sequence. Day labels in the official curriculum do not mean scheduled live classes.

    Day 1 — Introduction to ISO/IEC 27005 and risk management
    • Training course objectives and structure
    • Standards and regulatory frameworks
    • Fundamental concepts and principles of information security risk management
    • Information security risk management program
    • Context establishment
    Day 2 — Risk assessment, treatment, and communication based on ISO/IEC 27005
    • Risk identification
    • Risk analysis
    • Risk evaluation
    • Risk treatment
    • Information security risk communication and consultation
    Day 3 — Risk recording and reporting, monitoring and review, and assessment methods
    • Information security risk recording and reporting
    • Information security risk monitoring and review
    • OCTAVE and MEHARI methodologies
    • EBIOS method and NIST framework
    • CRAMM and TRA methods
    • Closing of the training course

    The exam and credential

    Know what
    you are preparing for.

    Credential eligibility and the certification decision are assessed by PECB. Training does not certify your organisation.

    Format
    Open-book, multiple-choice — stand-alone and scenario-based questions
    Duration
    2 hours
    Questions
    60 multiple-choice questions across 4 competency domains — fundamental principles and concepts of information security risk management (13 questions), implementation of an information security risk management program (7), the risk management framework and processes based on ISO/IEC 27005 (31, the largest domain at 52% of the paper), and other information security risk assessment methods (9)
    Pass mark
    70%

    After passing, apply to PECB for Provisional Risk Manager (no professional or project experience threshold) or Risk Manager (two years of professional experience, including one in information-security risk management, and 200 hours of related activity). The current course page and candidate handbook do not offer a Senior tier from this examination. PECB validates the application and requires its Code of Ethics. Provisional credentials are maintenance-exempt; Risk Manager has the applicable maintenance fees and 60 CPD hours per three-year cycle.

    Before you enrol: prerequisites
    • A fundamental understanding of ISO/IEC 27005 and comprehensive knowledge of risk assessment and information security.
    • Prior ISO 27001 exposure is helpful — the course teaches risk assessment in the context of an ISMS.

    From knowledge to a working decision

    A critical account could be misused

    Identify the information assets and business consequences, explain assessment assumptions and compare treatment options without claiming a score eliminates uncertainty.

    For an implementation or practitioner route, record a decision, owner, evidence requirement and review trigger. Explain your assumptions and what remains outside the exercise.

    Original optional study prompt, not an official PECB exam question, an additional included lab or evidence of professional experience. Use fictional information.

    ISO 27001 risk assessment and risk register: a worked exampleCheck the official PECB course catalogue

    Make time for the learning

    Your course.
    Your study plan.

    Turn the curriculum into a study plan: record your target dates, explain each topic in your own words and keep a list of questions to revisit. The downloadable sheet is pre-filled for this course and includes space for your notes. It is an optional Aegentra planning aid, not official PECB materials, an exam-question bank or evidence of professional experience. Use fictional examples, not confidential workplace information.

    Download your study planner (CSV)

    ISO/IEC 27005 Risk Manager · Editable spreadsheet · No sign-up required

    Before you book the exam.

    Check your exact exam

    Confirm the course, exam language, duration and permitted materials against PECB’s current exam listing and rules. Similar titles from different training providers can lead to different qualifications.

    PECB exam listing
    Prepare your exam environment

    Before booking, check the latest online-exam manual for identification, equipment, connectivity and room requirements. Ask PECB about reasonable accommodations early if you need them.

    PECB online-exam manual
    Plan the credential application

    Passing the exam and being awarded a particular credential are separate steps. Check the applicable experience, references and application requirements; do not assume a Lead title is awarded automatically.

    PECB certification requirements

    For permitted materials, exam conduct and accommodation requests, read PECB’s exam rules. Requirements can change; check the current rules for your exact exam.

    Your questions

    Before you choose.

    Is the official PECB exam included?

    Yes. Each listed bundle includes the official examination voucher: an initial attempt and one free retake if needed. Complete the exam, included retake and application within 12 months of purchase. The first retake requires at least 15 days after an unsuccessful attempt. PECB reviews eligibility before awarding a credential; buying a bundle does not guarantee certification.

    What is the difference between Self-Study and eLearning?

    Self-Study provides official slides for independent study. eLearning adds recorded PECB video lectures. Only the formats shown above are offered for this course.

    Does this include a certification fee?

    The bundle includes the application fee and first-year maintenance where applicable. Foundation certificates have no annual maintenance fee. Credential eligibility and ongoing requirements vary; PECB makes the award decision.

    Can I purchase online?

    Choose your course and learning format, review the total in your selected currency and pay securely through Stripe. PECB access is arranged within 24 hours after payment confirmation. Optional Labs access is activated for the matching course after confirmation.

    How does this PECB bundle compare with other UK training offers?

    Compare the exact awarding body and credential, curriculum, delivery format, exam inclusion, retake conditions, access period and eligibility. Similar course titles do not establish equivalence to another provider or scheme. These are PECB bundles; no CQI and IRCA, IAPP, EC-Council or Linux Foundation credential is implied.

    Does 12-month access mean 12 months of teaching?

    No. It is the material-access period, not a scheduled course duration or a promise of unlimited instructor support. The listed bundles are self-paced. Curriculum day labels describe a learning sequence; they are not booked live classroom dates.

    Which standard edition or syllabus should I check?

    Confirm the exact course edition and current PECB syllabus before enrolment, especially where a standard is being revised. Publication of a newer standard does not automatically update a training bundle or include a transition course. Confirm the course edition with the Academy before payment.

    Choose the right course for your role.

    Tell us what you need to achieve, what is in scope and where you are starting.

    Talk about your project