This two-day course introduces the essentials of information security risk management as described in the ISO/IEC 27005 guidelines: key vocabulary, principles, how the process unfolds and the main ways to put it into practice. It ends with the PECB exam, which awards the Certificate Holder in ISO/IEC 27005 Foundation credential. It is a good entry point for understanding how risk work feeds an ISO/IEC 27001 ISMS, before going further with the Risk Manager track. Short exercises built on realistic scenarios help you apply each concept as it is introduced.
The PECB ISO/IEC 27005 Foundation exam takes place on day two. It covers two competency domains: the fundamental concepts of information security risk management, and risk management approaches and processes. Quizzes structured like the exam let you gauge your progress during the course. No professional experience is required: you attend the training, pass the exam and sign the PECB Code of Ethics. Exam and certification fees are included, with one free retake within 12 months if you do not pass.
No. ISO/IEC 27005 provides guidance; organizations certify against ISO/IEC 27001. The PECB credential certifies your own competence. In practice, ISO/IEC 27005 helps you meet the risk assessment and risk treatment requirements of ISO/IEC 27001.
Foundation covers the basics in two days. Risk Manager, over three days, teaches you to run the full process and introduces other methods such as EBIOS, OCTAVE and MEHARI. If your job involves actually running risk assessments, Risk Manager is the better fit.
No. This entry-level credential has no prerequisites and requires no professional experience. The course explains each concept from first principles, with examples drawn from typical organizations.
Yes, together with the certification fee and one free retake within 12 months if needed.
Live online, in person in Casablanca or on-site at your organization, in French or English, with more than 200 pages of PECB courseware. On-site sessions can use your own risk register as the running example.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.