Course Outline
- Describe the risk management standards and principles defined in ISO/IEC 27005:2022 and ISO 31000
- Implement, sustain, and enhance an information security risk management framework in alignment with ISO/IEC 27005:2022 guidelines
- Execute information security risk management processes consistent with the ISO/IEC 27005:2022 standard
- Develop and implement strategies for risk communication and stakeholder consultation
Overview of ISO/IEC 27005:2022 and Risk Management Fundamentals
- Course scope, goals, and instructional structure
- Applicable standards and regulatory environments
- Core concepts and principles governing information security risk management
- Design and implementation of information security risk management programs
- Establishing the organizational context for risk management
- Identification of information security risks
- Analytical assessment of risk impacts and likelihoods
- Evaluation of risk against established acceptance criteria
- Strategies and procedures for risk treatment
- Protocols for information security risk communication and consultation
- Documentation and reporting of information security risks
- Ongoing monitoring and periodic review of risk posture
- Application of OCTAVE and MEHARI methodologies
- Integration of EBIOS methods and the NIST framework
- Utilization of CRAMM and Harmonized TRA methods
- Course conclusion and summary of key takeaways
PECB ISO/IEC 27005 Risk Manager Certification Criteria
To attain the PECB ISO/IEC 27005 Risk Manager designation, candidates must successfully complete the PECB Certified ISO/IEC 27005 Risk Manager examination (or an approved equivalent) and formally accept the PECB Code of Ethics.
Based on professional background and documented risk assessment experience, candidates may apply for one of two certification tiers:
1. Provisional Risk Manager
-
Designation Title: PECB Certified ISO/IEC 27005 Provisional Risk Manager
-
Professional Experience: No prior experience required.
-
Risk Management Experience: No specific hours required.
-
Target Audience: Professionals who have passed the examination but have not yet accumulated the required field work or active hours for full certification.
2. Risk Manager
-
Designation Title: PECB Certified ISO/IEC 27005 Risk Manager
-
Professional Experience: A minimum of two years of general professional experience, including at least one year dedicated specifically to Information Security Risk Management.
-
Risk Management Experience: A cumulative minimum of 200 hours of active information security risk management activities.
https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27005/iso-iec-27005-risk-manager
Requirements
- Managers or consultants responsible for or involved in organizational information security
- Professionals tasked with managing information security risks
- Members of information security teams, IT specialists, and privacy officers
- Individuals responsible for maintaining compliance with ISO/IEC 27001 information security requirements
- Project managers, consultants, or expert advisors seeking to master information security risk management practices for government operations
Testimonials (5)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
Dana Foster - Corrigan Oil Company
Course - ISO 9001 Foundation
The quizzes to reinforce the reading and the ability to ask questions at any time
Jonathan
Course - ISO 9001 Lead Auditor
Speed of response and communication