PECB ISO/IEC 27005 Risk Manager
Learn to develop, establish, maintain and improve an information security risk management framework based on ISO/IEC 27005.
- Exam and certification fees included
- 21 CPD credits on completion
- Taught in English
Manage information security risks
Identify, evaluate, analyse, treat and communicate information security risks based on ISO/IEC 27005.
Beyond one method
An overview of other risk assessment methods: OCTAVE, MEHARI, EBIOS, NIST, CRAMM and Harmonized TRA.
Exam and retake included
The price covers the exam and certification fees, plus one free retake within 12 months if you need it.
At a glance
About the course
The ISO/IEC 27005 Risk Manager course explains the risk management concepts and principles of ISO/IEC 27005 and ISO 31000. You learn to develop, establish, maintain and improve an information security risk management framework, and to identify, evaluate, analyse, treat and communicate information security risks.
The course also gives an overview of other risk assessment methods, such as OCTAVE, MEHARI, EBIOS, NIST, CRAMM and Harmonized TRA. It is followed by an exam; after passing it you can apply for the “PECB Certified ISO/IEC 27005 Risk Manager” credential.
What will you learn?
Risk management concepts
Explain the risk management concepts and principles of ISO/IEC 27005 and ISO 31000.
The risk management framework
Establish, maintain and improve an information security risk management framework based on ISO/IEC 27005.
Risk management processes
Apply the information security risk management processes of ISO/IEC 27005.
Communication and consultation
Plan and establish risk communication and consultation activities.
Risk assessment and treatment
Identify, analyse, evaluate and treat information security risks.
Recording and reporting
Record and report information security risks.
Monitoring and review
Monitor and review risks and the risk management process.
Other risk assessment methods
An overview of OCTAVE, MEHARI, EBIOS, NIST, CRAMM and Harmonized TRA.
Who should attend
This course is for people who manage or support information security in an organisation:
- Managers and consultants involved in or responsible for information security
- People responsible for managing information security risks
- Information security team members, IT professionals and privacy officers
- People responsible for conformity with the information security requirements of ISO/IEC 27001
- Project managers, consultants and expert advisers who want to master information security risk management
The exam at a glance
What is included
Training materials
More than 350 pages of training materials, with valuable information and practical examples.
Certification exam
The exam and certification fees are included in the course price.
Free exam retake
If you do not pass, you can retake the exam once for free within 12 months of the first exam date.
21 CPD credits
An attestation of course completion worth 21 CPD (Continuing Professional Development) credits.
Booking for a group?
Prices are shown without VAT; VAT may be added depending on your location. After your booking we contact you with the final price. You can also buy course vouchers in advance and use them for any future course. Do you have a group of at least three participants? Ask us for a group discount.
Your trainer
Martin Holzke is your trainer for this course.
Language
This course is given in English with English courseware.