SELF-PACED
Study at your own pace with official PECB materials and certification exam.
$479
- Official PECB PDF Materials
- Official PECB Online Exam
- Official PECB Certification
- Free Retake if needed
INSTRUCTOR-LED
Join live virtual training with an instructor, interactive discussions, and Q&A.
From $ 1,199
- Attendance of an online live training
- Official PECB PDF Materials
- Official PECB Online Exam
- Official PECB Certification & Attendance Record
- Free Retake if needed
Need training for a team? Contact us for corporate and group enrollment options.
| Duration | Exam | Delivery | Certificate | Level |
| 2 Days | Included | Live Online & Self-Study | PECB | Intermediate |
The PECB ISO/IEC 27035 Foundation training introduces the basic concepts of information security incident management. You will learn how to support an incident management plan and manage information security incidents.
The course also explains the main ISO/IEC 27035 incident management processes and how they can support an effective response to security incidents.
Why Attend ISO/IEC 27005 Lead Risk Manager Training?
Information security incidents can affect an organization’s data, systems, and services. Therefore, it is important to understand how to manage and respond to incidents.
This training helps you:
- Understand information security incident management
- Learn the basic steps of incident response
- Understand how to support an incident management plan
- Learn the main concepts of ISO/IEC 27035
- Understand the link between ISO/IEC 27035 and other standards
After completing the course, you can take the PECB ISO/IEC 27035 Foundation exam. If you pass the exam and meet the applicable requirements, you can apply for the PECB Certificate Holder in ISO/IEC 27035 Foundation certificate.
Day 1: Introduction to ISO/IEC 27005 and information security risk management
Day 2: Risk identification, analysis, evaluation, and treatment based on ISO/IEC 27005
Day 3: Information security risk communication and consultation, recording and reporting, and monitoring and review
Day 4: Risk assessment methods
Day 5: Certification exam
The “PECB Certified ISO/IEC 27005 Lead Risk Manager” exam meets all the requirements of the PECB Examination and Certification Program (ECP). It covers the following competency domains:
Domain 1: Fundamental principles and concepts of information security risk management
Domain 2: Implementation of an information security risk management program
Domain 3: Information security risk assessment
Domain 4: Information security risk treatment
Domain 5: Information security risk communication, monitoring, and improvement
Domain 6: Information security risk assessment methodologies
Upon the successful completion of the exam, you can apply for the “PECB Certified ISO/IEC 27005 Lead Manager” credential, depending on your level of experience, as shown in the table below. You will receive the certificate once you fulfill all the relevant educational and professional requirements.
| Credential | Exam | Professional experience | Risk Management experience | Other requirements |
| PECB Certified ISO/IEC 27005 Provisional Risk Manager | PECB Certified ISO/IEC 27005 Lead Risk Manager or equivalent | None | None | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27005 Lead Risk Manager | PECB Certified ISO/IEC 27005 Lead Risk Manager or equivalent | Five years: Two years of work experience in Information Security Risk Management | Information Security Risk Management activities: 300 hours | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27005 Senior Lead Risk Manager | PECB Certified ISO/IEC 27005 Lead Risk Manager or equivalent | Ten years: Seven years of work experience in Information Security Risk Management | Information Security Risk Management activities: 1000 hours | Signing the PECB Code of Ethics |
To be considered valid, the information security risk management activities should follow best implementation and management practices and include the following:
- Defining a risk management approach
- Determining the risk management objectives and scope
- Performing risk assessment
- Developing a risk management program
- Defining risk evaluation and risk acceptance criteria
- Evaluating risk treatment options
- Monitoring and reviewing the risk management program
- Certification fees and examination fees are included in the price of the training course.
- Participants will be provided with training course materials containing over 450 pages of information, practical examples, quizzes, and exercises.
- An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
- Candidates who have completed the training course but failed the exam are eligible to retake it once for free within a 12-month period from the initial date of the exam.
Who Should Attend?
This course is suitable for:
- Information security professionals
- IT and cybersecurity professionals
- Incident management team members
- Professionals interested in information security incident management
- Individuals who want to start a career in incident management
Learning Objectives
After completing the course, you will be able to:
- Explain the basic concepts of information security incident management
- Understand the main principles of ISO/IEC 27035
- Understand the relationship between ISO/IEC 27035 and other standards
- Explain the main steps used to manage information security incidents
- Understand basic incident management and response practices
Educational Approach
The course uses simple explanations, practical examples, and discussions.
Participants will also complete:
- Practice tests similar to the certification exam
- Practical questions and examples
- Interactive exercises
- Discussions and learning activities
Prerequisites
Basic knowledge of information security incident management is recommended. However, extensive prior experience is not required.
Need Help Before Enrolling?
Have questions about the course, pricing, or learning options? Our team will be happy to assist.
PECB Authorized Training Partner
Official PECB certifications with global recognition across 150+ countries.
Why Enroll Through MMK IT Consulting?
PECB Authorized Partner — 100% authentic certification, registered directly on PECB system
Invoice & PO Accepted — Perfect for HR/corporate procurement. We issue proper US invoices
Free Pre-Enrollment Guidance — Not sure which level? We advise you at no cost
2-Hour Response — Fast, professional communication Mon–Fri
US-Based Company — Texas LLC, fully compliant, trusted partner
Live Chat Support — Quick assistance through our website chat