The ISO/IEC 27005 Risk Manager training enables participants to understand the process of developing, establishing, maintaining, and improving an information security risk management framework based on the guidelines of ISO/IEC 27005:2022. The training provides valuable information about risk management concepts and principles as described in ISO/IEC 27005 and also ISO 31000, making it an ideal tool for ISO 27001 implementations or the maintenance of an ISMS.

In this training, you will acquire the necessary knowledge and skills to identify, assess, analyze, treat, and communicate information security risks based on ISO/IEC 27005. On the additional third day, you will receive an overview of other common risk assessment methods, such as:

• OCTAVE
• MEHARI
• EBIOS
• NIST
• CRAMM
• Harmonized TRA

This training and the methodology taught within it help you to get to know your organization in detail. When focusing on risk management for a successful ISMS, you must be very clear about what you are doing, how you are doing it, when and why you are doing it, and who is involved. The goal of the training is to instill the investigative mindset that a good risk manager needs.

The lesson days consist of a combination of theory and practice:

• Lessons that are richly filled with practical examples based on real cases
• Practical assignments based on a full case study including role play
• A mock exam that is comparable to the actual certification exam

In the ISO 27005 Risk Manager exam, you will be tested on the following domains, for which the training will obviously prepare you:

• Domain 1: Fundamental principles and concepts of information security risk management
• Domain 2: Implementation of an information security risk management program
• Domain 3: Framework and processes for information security risk management based on ISO/IEC 27005
• Domain 4: Other methods for assessing information security risks

The training is a combination of theory and practice and is illustrated with examples based on real cases. To fully benefit from the various practical assignments, the number of participants per group is limited. You will complete the training directly with the subsequent exam after which, depending on your performance, you can apply for the corresponding certification and title based on your experience. Our trainers have extensive practical experience with risk management in various sectors.

ISO 27005 Certified Risk Manager is classroom-based but can also be attended Live Online if desired. You will then follow the training live remotely with our own instructor, view the slides and notes on the whiteboard, and can ask questions to both the trainer and your fellow participants. Essentially, it is just like being present in the classroom training, but from your own location. If the Live Online training does not meet your expectations, you may attend it again in the classroom with us free of charge within a year.