- Duration: 2 days
Course Overview
The PECB ISO/IEC 27005 Foundation training course provides participants with a fundamental understanding of information security risk management based on the guidelines of ISO/IEC 27005. This two-day course introduces the key concepts, principles, terminology, and structure of the standard, along with the essential processes involved in managing information security risks.
Participants will gain an understanding of the information security risk management lifecycle, including context establishment, risk assessment, risk treatment, communication and consultation, recording and reporting, and monitoring and review.
Upon successful completion of the training course and examination, participants can apply for the PECB Certificate Holder in ISO/IEC 27005 Foundation designation.
Learning Objectives
Upon successful completion of this training course, participants will be able to:
- Describe the fundamental concepts, principles, and definitions of information security risk management.
- Interpret the guidelines of ISO/IEC 27005 for managing information security risks.
- Explain the key stages of the information security risk management process.
- Identify approaches, methods, and techniques used to implement and manage an information security risk management programme.
- Understand the importance of risk assessment, risk treatment, communication, documentation, and continuous monitoring.
Target Audience
This training course is intended for:
- Risk management professionals seeking to strengthen their understanding of information security risk management.
- Professionals who wish to become familiar with the guidelines of ISO/IEC 27005.
- Personnel responsible for managing information security risks within their areas of responsibility.
- Individuals interested in pursuing a career in information security risk management.
- Professionals seeking foundational knowledge of information security risk management standards and practices.
Course Content
Day 1: Introduction to ISO/IEC 27005 and Fundamental Concepts of Information Security Risk Management
- Introduction to ISO/IEC 27005 and its purpose.
- Fundamental concepts, principles, and terminology of information security risk management.
- Overview of information security risk management frameworks and approaches.
- Establishing the context for information security risk management.
- Introduction to information security risk assessment.
- Understanding risk identification, analysis, and evaluation.
Day 2: Information Security Risk Management and Certification Examination
- Information security risk treatment and the selection of appropriate controls.
- Risk communication and consultation.
- Recording and reporting information security risks.
- Monitoring and reviewing information security risks.
- Overview of information security risk management approaches, methods, and techniques.
- Review of key course concepts and examination preparation.
- PECB ISO/IEC 27005 Foundation Certification Examination.
Examination and Certification
The PECB ISO/IEC 27005 Foundation examination evaluates participants’ understanding of the fundamental concepts of information security risk management and the approaches and processes described in ISO/IEC 27005.
The examination covers the following competency domains:
- Domain 1: Fundamental Concepts of Information Security Risk Management.
- Domain 2: Information Security Risk Management Approaches and Processes.
Participants who successfully complete the training course and pass the examination may apply for the PECB Certificate Holder in ISO/IEC 27005 Foundation designation, subject to the applicable PECB certification requirements.
Certification Requirements
Candidates must:
- Complete the PECB ISO/IEC 27005 Foundation training course.
- Successfully pass the PECB ISO/IEC 27005 Foundation examination.
- Sign and comply with the PECB Code of Ethics.
No professional experience or information security risk management project experience is required for this entry-level credential.
Course Benefits
- Develop foundational knowledge of information security risk management based on ISO/IEC 27005.
- Understand the key principles and processes involved in identifying, assessing, treating, and monitoring information security risks.
- Gain familiarity with recognised information security risk management practices.
- Strengthen professional knowledge for further development in information security and risk management.
- Receive comprehensive training materials containing over 200 pages of information and practical examples.
- Obtain an attestation of course completion worth 14 Continuing Professional Development (CPD) credits, subject to attendance requirements.
- Benefit from included examination and certification fees.
- Access a free examination retake within 12 months in the event of failure, subject to PECB’s applicable rules and policies.
Duration
- Training Duration: 2 Days
- Examination Duration: 3 Hours
Prerequisites
There are no formal prerequisites for participating in this training course. No prior professional experience or information security risk management project experience is required.
Certification Body
PECB (Professional Evaluation and Certification Board)
PECB provides professional training, examination, and certification services across information security, risk management, governance, and related professional disciplines.