Course Outline
- Articulate the risk management concepts and principles established by ISO/IEC 27005:2022 and ISO 31000
- Develop, maintain, and enhance an information security risk management framework aligned with ISO/IEC 27005:2022 guidelines
- Implement information security risk management processes in accordance with ISO/IEC 27005:2022
- Design and implement risk communication and consultation strategies
Introduction to ISO/IEC 27005:2022 and risk management
- Course objectives and structural overview
- Relevant standards and regulatory frameworks
- Core concepts and principles of information security risk management
- Structuring an information security risk management program
- Establishing the organizational context
- Identifying potential risks
- Conducting risk analysis
- Evaluating risk levels
- Implementing risk treatment strategies
- Managing risk communication and consultation
- Recording and reporting information security risks
- Monitoring and reviewing risk processes
- Exploring OCTAVE and MEHARI methodologies
- Understanding the EBIOS method and NIST framework
- Reviewing CRAMM and TRA methods
- Course conclusion and summary
PECB ISO/IEC 27005 Risk Manager Certification Requirements
To earn the PECB ISO/IEC 27005 Risk Manager designation, candidates must successfully pass the PECB Certified ISO/IEC 27005 Risk Manager exam (or an approved equivalent) and formally agree to the PECB Code of Ethics.
Depending on your professional background and experience in risk assessment, you are eligible for one of two credential levels:
1. Provisional Risk Manager
-
Credential Title: PECB Certified ISO/IEC 27005 Provisional Risk Manager
-
Professional Experience: No prior experience required.
-
Risk Management Experience: No specific hours required.
-
Best Suited For: Individuals who have passed the certification exam but have not yet accrued the fieldwork or active hours necessary for full certification.
2. Risk Manager
-
Credential Title: PECB Certified ISO/IEC 27005 Risk Manager
-
Professional Experience: Two years of total professional experience, including at least one year dedicated to Information Security Risk Management.
-
Risk Management Experience: A cumulative minimum of 200 hours of active information security risk management activities.
https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27005/iso-iec-27005-risk-manager
Requirements
- Managers and consultants who are involved in or accountable for organizational information security
- Professionals tasked with overseeing information security risks
- Members of information security teams, IT specialists, and privacy officers
- Individuals responsible for ensuring organizational compliance with ISO/IEC 27001 information security requirements
- Project managers, consultants, and expert advisors aiming to refine their expertise in managing information security risks
Testimonials (5)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
Dana Foster - Corrigan Oil Company
Course - ISO 9001 Foundation
The quizzes to reinforce the reading and the ability to ask questions at any time
Jonathan
Course - ISO 9001 Lead Auditor
Speed of response and communication
