We provide virtual course about ISO/IEC 27005 Lead Risk Manager in english. ISO/IEC 27005 Lead Risk Manager is an advanced course designed to provide participants with in-depth knowledge and practical skills in information security risk management based on the ISO/IEC 27005 standard.
Course description:
The course focuses on equipping delegates with the ability to lead risk management activities, perform complex risk assessments, implement risk treatment strategies, and embed risk practices into organisational processes. This course goes beyond basic risk concepts and delves into professional-level approaches that help organisations manage risk effectively in complex environments.
Participants learn how to structure risk management frameworks, conduct detailed risk analyses, prioritise treatments, and align risk activities with business objectives and governance requirements. Real-world examples and practical exercises help bridge theory with applicable risk management practices.
Course objectives:
Upon completion of this course, participants will be able to:
• Understand advanced concepts and requirements of ISO/IEC 27005 risk management
• Lead and coordinate information security risk management activities
• Evaluate, analyse and prioritise risks using structured risk methodologies
• Design, implement and monitor risk treatment plans
• Embed continual risk improvement practices into organisational processes
• Prepare for and take the ISO/IEC 27005 Lead Risk Manager certification exam
Agenda:
Module 1 - Advanced principles and structure of ISO/IEC 27005:
• Participants begin with a deeper examination of the ISO/IEC 27005 standard, focusing on advanced risk concepts, key definitions and how structured risk management underpins organisational governance.
Module 2 - Risk leadership and governance:
• This section focuses on how to lead risk management activities, including establishing organisational context, aligning risk strategies with business goals, and creating mechanisms for high-level oversight and accountability.
Module 3 - Risk assessment methodology:
• Participants explore structured risk assessment approaches, including advanced identification, quantitative and qualitative analysis, and prioritisation techniques that support decision-making and resource allocation.
Module 4 - Design and implementation of risk treatments:
• This part of the course addresses the selection and implementation of risk treatment options. Participants learn how to design appropriate risk controls, mitigation plans and treatment monitoring schemes to ensure continuous improvement.
Module 5 - Integration with management systems:
• Participants learn how to integrate risk management processes with other organisational management systems, including ISO/IEC 27001, to support governance and compliance frameworks.
Module 6 - Monitoring, review and continual improvement:
• This section covers how to monitor risk performance, conduct reviews, evaluate treatment effectiveness, and embed practices that support a continual improvement of risk posture and resilience.
Module 7 - Preparation for certification exam:
• The course concludes with structured preparation for the ISO/IEC 27005 Lead Risk Manager certification exam, including review of key competencies, exam structure and success strategies.
Target audience:
This course is designed for risk managers, security professionals with responsibility for risk governance, compliance-officers, consultants and professionals who lead or coordinate organisational risk management activities.
Prerequisites:
• Participants should already have a foundation in information security risk management, preferably through ISO/IEC 27005 Foundation certification or equivalent experience in risk management.
Language:
• English course material, english speaking instructor
Certification:
For virtual courses we will send out a voucher that gives you access to an online exam. This can be booked and taken home monitored by a proctor via camera. More information about the exam rules will be send from PECB.