SELF-PACED
Study at your own pace with official PECB materials and certification exam.
$479
- Official PECB PDF Materials
- Official PECB Online Exam
- Official PECB Certification
- Free Retake if needed
INSTRUCTOR-LED
Join live virtual training with an instructor, interactive discussions, and Q&A.
From $ 1,299
- Attendance of an online live training
- Official PECB PDF Materials
- Official PECB Online Exam
- Official PECB Certification & Attendance Record
- Free Retake if needed
Need training for a team? Contact us for corporate and group enrollment options.
| Duration | Exam | Delivery | Certificate | Level |
| 2 Days | Included | Live Online & Self-Study | PECB | Intermediate |
The PECB ISO/IEC 27005 Foundation training course introduces the basic concepts of information security risk management. It explains the key guidelines of ISO/IEC 27005 and how organizations can manage information security risks.
Why Should You Attend?
This two-day training course gives you a clear introduction to the ISO/IEC 27005 risk management process.
You will learn the main steps used to manage information security risks, including:
- Setting the risk management context
- Identifying and assessing risks
- Treating information security risks
- Communicating and consulting with stakeholders
- Recording and reporting risk information
- Monitoring and reviewing risks
After completing the training, you can take the PECB ISO/IEC 27005 Foundation exam. If you pass the exam, you can apply for the PECB Certificate Holder in ISO/IEC 27005 Foundation designation, subject to the applicable PECB requirements.
Day 1: Introduction to ISO/IEC 27002
Day 2: Information assets, people controls, physical controls, and operational security controls
Day 3: Information security incident management and monitoring of information security controls and certification exam
The “PECB Certified ISO/IEC 27002 Manager” exam meets all the requirements of the PECB Examination and Certification Program (ECP). It covers the following competency domains:
Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacy
Domain 2: Information security controls based on ISO/IEC 27002
For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.
After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential.
| Credential | Exam | Professional experience | ISM experience | Other requirements |
| PECB Certified ISO/IEC 27002 Provisional Manager | PECB Certified ISO/IEC 27002 Manager exam or equivalent | None | None | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27002 Manager | PECB Certified ISO/IEC 27002 Manager exam or equivalent | Two years: One year of work experience in Information Security Management | Information Security Management activities: a total of 200 hours | Signing the PECB Code of Ethics |
The information security activities should follow best implementation and management practices and include the following:
- Drafting an ISMS implementation plan
- Managing an information security implementation project
- Implementing information security processes
- Selecting and implementing information security controls
For more information about ISO/IEC 27002 certifications and the PECB Certification process, please refer to Certification Rules and Policies.
- Certification fees and examination fees are included in the price of the training course.
- Participants will be provided with training material containing over 350 pages of information and practical examples.
- An attestation of course completion worth 21 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
- Candidates who have completed the training course but failed the exam are eligible to retake it once for free within a 12-month period from the initial date of the exam.
Who Should Attend?
This course is suitable for:
- Risk management professionals
- Information security professionals
- Professionals who want to learn ISO/IEC 27005
- Employees who manage information security risks
- Anyone interested in information security risk management
Learning Objectives
After completing the course, you will be able to:
- Explain basic information security risk management concepts
- Understand key risk management terms and principles
- Explain the main guidelines of ISO/IEC 27005
- Identify common approaches for managing information security risks
- Understand methods used in an information security risk management program
Educational Approach
The training uses simple explanations, examples, and discussions.
You will also take part in:
- Interactive learning sessions
- Practical examples
- Questions and discussions
- Exam-style quizzes
As a result, you can build a clear understanding of ISO/IEC 27005 information security risk management.
Prerequisites
No prerequisites are required.
The course is suitable for beginners and professionals who want to develop basic knowledge of information security risk management.
Frequently Asked Questions
Need Help Before Enrolling?
Have questions about the course, pricing, or learning options? Our team will be happy to assist.
PECB Authorized Training Partner
Official PECB certifications with global recognition across 150+ countries.
Why Enroll Through MMK IT Consulting?
PECB Authorized Partner — 100% authentic certification, registered directly on PECB system
Invoice & PO Accepted — Perfect for HR/corporate procurement. We issue proper US invoices
Free Pre-Enrollment Guidance — Not sure which level? We advise you at no cost
2-Hour Response — Fast, professional communication Mon–Fri
US-Based Company — Texas LLC, fully compliant, trusted partner
Live Chat Support — Quick assistance through our website chat