PECB Certified EBIOS Risk Manager

• Duration: 3 days

Course Overview

The PECB Certified EBIOS Risk Manager training course equips participants with the knowledge and practical skills required to conduct information security risk assessments using the EBIOS Risk Manager (EBIOS RM) method.

Through practical exercises and case studies, participants will learn how to identify risk sources, establish security baselines, develop strategic and operational risk scenarios, and determine appropriate risk treatment measures. The course provides a structured understanding of the risk management life cycle and the techniques required to analyse, evaluate, and communicate information security risks.

The training also supports organizations implementing an Information Security Management System (ISMS) in accordance with ISO/IEC 27001 by strengthening their risk assessment and treatment capabilities.

Upon successfully passing the examination, participants may apply for the PECB Certified EBIOS Risk Manager credential, subject to the applicable professional experience and certification requirements.

Learning Objectives

By the end of this training course, participants will be able to:

• Understand the fundamental principles and concepts of information security risk management using the EBIOS RM method.
• Explain the activities and stages involved in the EBIOS RM risk assessment process.
• Understand how to plan, coordinate, monitor, and guide an EBIOS RM study.
• Interpret the findings and key deliverables of an EBIOS RM study.
• Conduct an information security risk assessment using the EBIOS RM method.
• Identify and analyse risk sources and develop strategic and operational risk scenarios.
• Determine appropriate risk treatment measures for information systems.
• Analyse and communicate the results of an EBIOS RM study effectively.
• Support organizational information security risk management activities.

Target Audience

This course is suitable for:

• Individuals seeking to understand the fundamental concepts of information security risk management.
• Professionals involved in risk assessment activities using the EBIOS RM method.
• Managers seeking to understand techniques for conducting EBIOS-based risk assessments.
• Managers responsible for analysing and communicating risk assessment results.
• Information security professionals involved in risk identification, analysis, evaluation, and treatment.
• Professionals supporting ISO/IEC 27001 implementation and information security risk management.

Course Content

Day 1: Introduction to EBIOS Risk Manager and Risk Identification

• Training course objectives and structure.
• Introduction to the EBIOS Risk Manager method.
• Fundamental concepts of information security risk management.
• Workshop 1: Scope and Security Baseline.
• Workshop 2: Risk Origins.

Day 2: Risk Scenario Development and Treatment

• Workshop 3: Strategic Scenarios.
• Workshop 4: Operational Scenarios.
• Workshop 5: Risk Treatment.
• Understanding the outputs and deliverables of the EBIOS RM study.
• Reviewing risk assessment findings and treatment decisions.
• Course review and preparation for certification.

Day 3: Certification Examination

• Final course review.
• Certification examination.

Examination and Certification

The PECB Certified EBIOS Risk Manager examination complies with the requirements of the PECB Examination and Certification Programme (ECP).

The examination covers the following competency domains:

• Domain 1: Fundamental Principles and Concepts of Information Security Risk Management Based on the EBIOS Method.
• Domain 2: Information Security Risk Management Framework Based on the EBIOS Method.
• Domain 3: Information Security Risk Assessment Using the EBIOS Method.

Examination duration: 3 hours.

Upon successfully passing the examination, participants may apply for the appropriate PECB credential based on their professional experience, EBIOS risk assessment experience, and compliance with the applicable certification requirements.

Certification Requirements

Candidates may apply for one of the following credentials, subject to meeting the applicable PECB requirements.

1. PECB Certified EBIOS Provisional Risk Manager

• Examination: Successful completion of the PECB Certified EBIOS Risk Manager examination or an equivalent examination.
• Professional experience: No professional experience required.
• EBIOS risk management experience: None required.
• Other requirements: Signing the PECB Code of Ethics.

2. PECB Certified EBIOS Risk Manager

• Examination: Successful completion of the PECB Certified EBIOS Risk Manager examination or an equivalent examination.
• Professional experience: 2 years, including 1 year of work experience in risk management.
• EBIOS risk assessment activities: A total of 200 hours.
• Other requirements: Signing the PECB Code of Ethics.

The final credential awarded depends on the candidate’s verified eligibility and compliance with the applicable PECB Certification Rules and Policies.

Course Benefits

• Certification and examination fees are included in the training course fee.
• Participants receive training materials containing over 200 pages of information and practical examples.
• Participants who attend the training course receive a participation certificate equivalent to 21 Continuing Professional Development (CPD) credits.
• Candidates who fail the examination may retake it within 12 months at no additional examination fee, subject to the applicable PECB terms and conditions.
• Develop practical skills in conducting structured information security risk assessments.
• Improve the ability to identify risk sources and analyse strategic and operational scenarios.
• Strengthen risk treatment planning and risk communication capabilities.
• Gain knowledge that supports information security risk management and ISO/IEC 27001 implementation activities.

Prerequisites

The supplied course information does not specify mandatory prerequisites for attending the training. However, a basic understanding of information security, risk management, or information systems may help participants gain greater value from the course.

Certification Body

PECB (Professional Evaluation and Certification Board)

PECB provides professional training, examination, and certification services across information security, risk management, governance, and related professional disciplines.