Title: PECB ISO/IEC 27005 Risk Manager Course & Exam Bundle (UK) > Information security risk management based on ISO/IEC 27005 — plus OCTAVE, MEHARI, EBIOS, NIST, CRAMM, and Harmonized TRA. Source: https://aegentra.co.uk/academy/iso-27005-risk-manager Publisher: Aegentra (aegentra.co.uk), United Kingdom edition. Prices in GBP excluding VAT. Updated: 2026-11-04 Licence: public web content; cite the source URL. PECB / Risk Manager # ISO/IEC 27005 Risk Manager — Course & exam bundle. Information security risk management based on ISO/IEC 27005 — plus OCTAVE, MEHARI, EBIOS, NIST, CRAMM, and Harmonized TRA. [Compare learning formats](https://aegentra.co.uk/academy/iso-27005-risk-manager#purchase) [Explore the curriculum](https://aegentra.co.uk/academy/iso-27005-risk-manager#curriculum) Online · Self-paced · English [Verify PECB partner ID 232290](https://pecb.com/en/partners?companyName=aegentra&modal=232290) ## Slide-only bundle Base price£443.35 - Official PECB slides · 12-month myPECB access - Exam voucher: 2 attempts — initial exam + one free retake if needed - Certification application fee included; first-year maintenance included where applicable ## PECB eLearning bundle Base price£537.57 - Official PECB slides and recorded videos · 12-month myPECB access - Exam voucher: 2 attempts — initial exam + one free retake if needed - Certification application fee included; first-year maintenance included where applicable Course and exam, together ## Choose your learning format. Compare the course formats and their inclusions. Choose a bundle to pay securely on Stripe. Stripe asks for your email, which we use to assign your PECB course. ### Self-Study course and exam bundle Read and revisit the official slide-based materials at your own pace. No video lectures or live teaching. **What’s included** 12 months of myPECB course access Official PECB course slides Official PECB exam voucher: 2 attempts — initial exam + one free retake if needed Certification application fee included First-year certification maintenance fee included where applicable Base price (excl. VAT)£443.35 Total to pay (incl. 20% UK VAT)£532.02 Per learner · GBP [Buy](https://aegentra.co.uk/checkout?course=iso-27005-risk-manager&format=self-study) ### PECB eLearning course and exam bundle Learn at your own pace with recorded video teaching alongside the official course slides. **What’s included** 12 months of myPECB course access Official PECB course slides Recorded PECB video lectures Official PECB exam voucher: 2 attempts — initial exam + one free retake if needed Certification application fee included First-year certification maintenance fee included where applicable Base price (excl. VAT)£537.57 Total to pay (incl. 20% UK VAT)£645.08 Per learner · GBP [Buy](https://aegentra.co.uk/checkout?course=iso-27005-risk-manager&format=elearning) **Exam and purchase conditions** Complete the exam, included retake and application within 12 months of purchase. The first retake requires at least 15 days after an unsuccessful attempt. PECB reviews eligibility before awarding a credential; buying a bundle does not guarantee certification. An enquiry does not create an order. An order is confirmed after successful payment and acceptance. Choose your payment currency in the top navigation. Prices shown are for UK personal purchases; other locations and business purchases need a written quote. ## Your enrolment ISO/IEC 27005 Risk Manager Is this your next step? ## Who this course suits best. - Managers or consultants responsible for information security in an organisation - Individuals responsible for managing information security risks - Members of information security teams, IT professionals, and privacy officers - Individuals maintaining conformity with the information security requirements of ISO/IEC 27001 - Project managers, consultants, and expert advisers seeking to master information security risk management People behind the recorded lessons ## Meet the PECB eLearning presenters. PECB names these presenters in its English eLearning brochure, checked 18 October 2026. These are recorded lessons, not Aegentra staff profiles or a booking with a live trainer. The line-up can change with the language or course edition. PECB recorded-course presenter ### Graeme Parker PECB recorded-course presenter across information security, AI management, privacy and risk. His courses connect management-system concepts with implementation and audit. [View the PECB course brochure (PDF)](https://pecb.com/pdf/brochures/iso-iec-27005-risk-manager-elearning-en.pdf) PECB recorded-course presenter ### Andro Kull His PECB contributor profile describes experience in IT audit, risk management and information security. [Read the PECB profile](https://insights.pecb.com/author/andro-kull/) [Check the presenter list in the official brochure (PDF)](https://pecb.com/pdf/brochures/iso-iec-27005-risk-manager-elearning-en.pdf) **Which learning support is included?** Self-Study is independent learning from the official materials. eLearning, where listed, adds recorded instruction; neither standard bundle promises live tuition or unlimited one-to-one support. For the listed ISO 27001 and ISO 42001 courses, the separately quoted consultancy option is explained above. PECB manages examination and certification decisions. Knowledge you can apply ## What you will work through. - Explain the risk management concepts and principles outlined by ISO/IEC 27005 and ISO 31000. - Establish, maintain, and improve an information security risk management framework based on the guidelines of ISO/IEC 27005. - Apply information security risk management processes based on the guidelines of ISO/IEC 27005. - Plan and establish risk communication and consultation activities. - Select an appropriate assessment method — OCTAVE, MEHARI, EBIOS, NIST, CRAMM, or Harmonized TRA — for the organisation in front of you. Inside the course ## The curriculum. Modules describe the learning sequence. Day labels in the official curriculum do not mean scheduled live classes. **Day 1 — Introduction to ISO/IEC 27005 and risk management** Training course objectives and structure Standards and regulatory frameworks Fundamental concepts and principles of information security risk management Information security risk management program Context establishment **Day 2 — Risk assessment, treatment, and communication based on ISO/IEC 27005** Risk identification Risk analysis Risk evaluation Risk treatment Information security risk communication and consultation **Day 3 — Risk recording and reporting, monitoring and review, and assessment methods** Information security risk recording and reporting Information security risk monitoring and review OCTAVE and MEHARI methodologies EBIOS method and NIST framework CRAMM and TRA methods Closing of the training course The exam and credential ## Know what you are preparing for. Credential eligibility and the certification decision are assessed by PECB. Training does not certify your organisation. - **Format:** Open-book, multiple-choice — stand-alone and scenario-based questions - **Duration:** 2 hours - **Questions:** 60 multiple-choice questions across 4 competency domains — fundamental principles and concepts of information security risk management (13 questions), implementation of an information security risk management program (7), the risk management framework and processes based on ISO/IEC 27005 (31, the largest domain at 52% of the paper), and other information security risk assessment methods (9) - **Pass mark:** 70% After passing, apply to PECB for Provisional Risk Manager (no professional or project experience threshold) or Risk Manager (two years of professional experience, including one in information-security risk management, and 200 hours of related activity). The current course page and candidate handbook do not offer a Senior tier from this examination. PECB validates the application and requires its Code of Ethics. Provisional credentials are maintenance-exempt; Risk Manager has the applicable maintenance fees and 60 CPD hours per three-year cycle. **Before you enrol: prerequisites** A fundamental understanding of ISO/IEC 27005 and comprehensive knowledge of risk assessment and information security. Prior ISO 27001 exposure is helpful — the course teaches risk assessment in the context of an ISMS. From knowledge to a working decision ## A critical account could be misused Identify the information assets and business consequences, explain assessment assumptions and compare treatment options without claiming a score eliminates uncertainty. For an implementation or practitioner route, record a decision, owner, evidence requirement and review trigger. Explain your assumptions and what remains outside the exercise. Original optional study prompt, not an official PECB exam question, an additional included lab or evidence of professional experience. Use fictional information. [ISO 27001 risk assessment and risk register: a worked example](https://aegentra.co.uk/knowledge/iso-27001-risk-assessment-example) [Check the official PECB course catalogue](https://help.pecb.com/list-of-pecb-courses/) Make time for the learning ## Your course. Your study plan. Turn the curriculum into a study plan: record your target dates, explain each topic in your own words and keep a list of questions to revisit. The downloadable sheet is pre-filled for this course and includes space for your notes. It is an optional Aegentra planning aid, not official PECB materials, an exam-question bank or evidence of professional experience. Use fictional examples, not confidential workplace information. [Download your study planner (CSV)](https://aegentra.co.uk/downloads/iso-27005-risk-manager-study-planner.csv) ISO/IEC 27005 Risk Manager · Editable spreadsheet · No sign-up required ### Before you book the exam. **Check your exact exam** Confirm the course, exam language, duration and permitted materials against PECB’s current exam listing and rules. Similar titles from different training providers can lead to different qualifications. [PECB exam listing](https://help.pecb.com/list-of-pecb-exams/) **Prepare your exam environment** Before booking, check the latest online-exam manual for identification, equipment, connectivity and room requirements. Ask PECB about reasonable accommodations early if you need them. [PECB online-exam manual](https://pecb.com/en/online-exam-manual) **Plan the credential application** Passing the exam and being awarded a particular credential are separate steps. Check the applicable experience, references and application requirements; do not assume a Lead title is awarded automatically. [PECB certification requirements](https://pecb.com/en/certification-rules-and-policies) For permitted materials, exam conduct and accommodation requests, read [PECB’s exam rules](https://pecb.com/en/exam-rules-and-policies). Requirements can change; check the current rules for your exact exam. Your questions ## Before you choose. **Is the official PECB exam included?** Yes. Each listed bundle includes the official examination voucher: an initial attempt and one free retake if needed. Complete the exam, included retake and application within 12 months of purchase. The first retake requires at least 15 days after an unsuccessful attempt. PECB reviews eligibility before awarding a credential; buying a bundle does not guarantee certification. **What is the difference between Self-Study and eLearning?** Self-Study provides official slides for independent study. eLearning adds recorded PECB video lectures. Only the formats shown above are offered for this course. **Does this include a certification fee?** The bundle includes the application fee and first-year maintenance where applicable. Foundation certificates have no annual maintenance fee. Credential eligibility and ongoing requirements vary; PECB makes the award decision. **Can I purchase online?** Choose your course and learning format, review the total in your selected currency and pay securely through Stripe. PECB access is arranged within 24 hours after payment confirmation. Optional Labs access is activated for the matching course after confirmation. **How does this PECB bundle compare with other UK training offers?** Compare the exact awarding body and credential, curriculum, delivery format, exam inclusion, retake conditions, access period and eligibility. Similar course titles do not establish equivalence to another provider or scheme. These are PECB bundles; no CQI and IRCA, IAPP, EC-Council or Linux Foundation credential is implied. **Does 12-month access mean 12 months of teaching?** No. It is the material-access period, not a scheduled course duration or a promise of unlimited instructor support. The listed bundles are self-paced. Curriculum day labels describe a learning sequence; they are not booked live classroom dates. **Which standard edition or syllabus should I check?** Confirm the exact course edition and current PECB syllabus before enrolment, especially where a standard is being revised. Publication of a newer standard does not automatically update a training bundle or include a transition course. Confirm the course edition with the Academy before payment. ## Choose the right course for your role. Tell us what you need to achieve, what is in scope and where you are starting. [Talk about your project](https://aegentra.co.uk/contact)