SELF-PACED
Study at your own pace with official PECB materials and certification exam.
$699
- Official PECB PDF Materials
- Official PECB Online Exam
- Official PECB Certification
- Free Retake if needed
INSTRUCTOR-LED
Join live virtual training with an instructor, interactive discussions, and Q&A.
From $ 1,799
- Attendance of an online live training
- Official PECB PDF Materials
- Official PECB Online Exam
- Official PECB Certification & Attendance Record
- Free Retake if needed
Need training for a team? Contact us for corporate and group enrollment options.
| Duration | Exam | Delivery | Certificate | Level |
| 2 Days | Included | Live Online & Self-Study | PECB | Intermediate |
The ISO/IEC 27035 Lead Incident Manager Training course helps professionals develop the skills needed to manage information security incidents. The course is based on the ISO/IEC 27035 series and recognized incident management practices.
Participants learn about the full incident management lifecycle. This includes incident planning, detection, assessment, response, reporting, and post-incident activities. They also learn how key stakeholders and external organizations support effective incident response.
Why Attend ISO/IEC 27005 Lead Risk Manager Training?
Information security incidents can happen at any time. They may be caused by human error, technical issues, or deliberate actions. Therefore, organizations need a clear process to detect, assess, and respond to incidents.
This training helps participants understand how to build and manage an effective incident response process. In addition, it provides practical guidance that supports information security and business continuity.
The course aligns with ISO/IEC 27001, ISO/IEC 27005, and other standards in the ISO/IEC 27000 family.
After completing the training and passing the exam, participants can apply for the PECB Certified ISO/IEC 27035 Lead Incident Manager credential, subject to the certification requirements.
Day 1: Introduction to ISO/IEC 27005 and information security risk management
Day 2: Risk identification, analysis, evaluation, and treatment based on ISO/IEC 27005
Day 3: Information security risk communication and consultation, recording and reporting, and monitoring and review
Day 4: Risk assessment methods
Day 5: Certification exam
The “PECB Certified ISO/IEC 27005 Lead Risk Manager” exam meets all the requirements of the PECB Examination and Certification Program (ECP). It covers the following competency domains:
Domain 1: Fundamental principles and concepts of information security risk management
Domain 2: Implementation of an information security risk management program
Domain 3: Information security risk assessment
Domain 4: Information security risk treatment
Domain 5: Information security risk communication, monitoring, and improvement
Domain 6: Information security risk assessment methodologies
Upon the successful completion of the exam, you can apply for the “PECB Certified ISO/IEC 27005 Lead Manager” credential, depending on your level of experience, as shown in the table below. You will receive the certificate once you fulfill all the relevant educational and professional requirements.
| Credential | Exam | Professional experience | Risk Management experience | Other requirements |
| PECB Certified ISO/IEC 27005 Provisional Risk Manager | PECB Certified ISO/IEC 27005 Lead Risk Manager or equivalent | None | None | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27005 Lead Risk Manager | PECB Certified ISO/IEC 27005 Lead Risk Manager or equivalent | Five years: Two years of work experience in Information Security Risk Management | Information Security Risk Management activities: 300 hours | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27005 Senior Lead Risk Manager | PECB Certified ISO/IEC 27005 Lead Risk Manager or equivalent | Ten years: Seven years of work experience in Information Security Risk Management | Information Security Risk Management activities: 1000 hours | Signing the PECB Code of Ethics |
To be considered valid, the information security risk management activities should follow best implementation and management practices and include the following:
- Defining a risk management approach
- Determining the risk management objectives and scope
- Performing risk assessment
- Developing a risk management program
- Defining risk evaluation and risk acceptance criteria
- Evaluating risk treatment options
- Monitoring and reviewing the risk management program
- Certification fees and examination fees are included in the price of the training course.
- Participants will be provided with training course materials containing over 450 pages of information, practical examples, quizzes, and exercises.
- An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
- Candidates who have completed the training course but failed the exam are eligible to retake it once for free within a 12-month period from the initial date of the exam.
Who Should Attend?
This training is suitable for:
- Managers and consultants working in information security
- Professionals responsible for incident response teams (IRTs)
- IT and cybersecurity professionals
- Information security risk managers
- Incident response team members
- Incident response coordinators
- Professionals responsible for incident handling and response
Learning Objectives
By the end of this training, you will be able to:
- Explain the key principles of information security incident management
- Develop and implement an incident response plan
- Select and manage an effective incident response team
- Assess information security threats and vulnerabilities
- Apply good practices from international standards
- Improve incident response processes
- Perform post-incident analysis and identify lessons learned
Educational Approach
The training combines theory with practical examples and best practices. Participants complete exercises, quizzes, and scenario-based activities.
In addition, learners can discuss real-world situations with other participants. The quizzes also follow a format similar to the certification exam. As a result, participants can build confidence before taking the exam.
Prerequisites
Participants should have a general understanding of:
- The ISO/IEC 27000 family of standards
- Information security principles
- Incident management processes
Need Help Before Enrolling?
Have questions about the course, pricing, or learning options? Our team will be happy to assist.
PECB Authorized Training Partner
Official PECB certifications with global recognition across 150+ countries.
Why Enroll Through MMK IT Consulting?
PECB Authorized Partner — 100% authentic certification, registered directly on PECB system
Invoice & PO Accepted — Perfect for HR/corporate procurement. We issue proper US invoices
Free Pre-Enrollment Guidance — Not sure which level? We advise you at no cost
2-Hour Response — Fast, professional communication Mon–Fri
US-Based Company — Texas LLC, fully compliant, trusted partner
Live Chat Support — Quick assistance through our website chat