PECB ISO 27005 Foundation

ISO 27005 Foundation training course provides information on the fundamental concepts and principles of information security risk management based on ISO 27005.

Overview

Why Should You Attend?

ISO 27005 Foundation is a two-day training course that focuses on the information security risk management process introduced by ISO 27005 and the structure of the standard. It provides an overview of the guidelines of ISO 27005 for managing information security risks, including context establishment, risk assessment, risk treatment, communication and consultation, recording and reporting, and monitoring and review.

After attending the training course, you can sit for the exam. If you successfully pass the exam, you can apply for the “PECB Certificate Holder in ISO 27005 Foundation” designation. This certificate demonstrates that you have a general knowledge of ISO 27005 guidelines for information security risk management.

Learning Objectives

Upon successful completion of this training course, you will be able to:

Describe the main risk management concepts, principles, and definitions
Interpret the guidelines of ISO/IEC 27005 for managing information security risks
Identify approaches, methods, and techniques used for the implementation and management of an information security risk management program

Educational Approach

The training course is participant centered and:

Contains lecture sessions illustrated with examples and discussions
Encourages interaction between participants by means of questions and suggestions
Includes quizzes with similar structure to the exam

Prerequisites

There are no prerequisites to participate in this training course.

Program

Module 1: Introduction to ISO/IEC 27005 and fundamental concepts of information security risk management

Module 2: Information security risk management and certificate exam

This training course is intended for

Risk management professionals
Professionals wishing to get acquainted with the guidelines of ISO/IEC 27005 for information security risk management
Personnel tasked with managing information security risks in their area of responsibility
Individuals interested in pursuing a career in information security risk management

Exam & Certificate

The exam fully meets the requirements of the PECB Examination and Certificate Programme. It covers the following competency domains:

Domain 1: Fundamental concepts of information security risk management

Domain 2: Information security risk management approaches and processes

For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.

Make your choice

Coached Self-Study

The coached self-study model (delivered remotely) includes 3 hours of coaching (to be planned and agreed upon with the trainer) during a 4‑week timeframe encompassing a summary of each training day.

All self-study materials will be provided in electronic format.

Key Features:

✔️ Official training materials
✔️ Professional coaching by a European‑certified expert
✔️ Exams included (two attempts available)

This approach is ideal if you want to invest time in self-study.

Your booking is confirmed once full payment of your invoice is received.

Self-Study (100% self-learning)

This model is a complete self-learning.

Key Features :
Self‑study training materials
Exam included (two attempts available)

This approach is ideal if you want to invest time in self-study.

You will receive the training materials once full payment of your invoice is received.

Individual Fast-Track (Online – Intensive)

An intensive and personalized session where the training material is delivered in a highly condensed format. This approach gives you direct and personalized interaction with a professional expert.

Half‑day or a full‑day training, adapted to your level of experience.

Key Features :
Official training materials
Professional trainer – One‑to‑one coaching (1:1)
Session include a summary of each training day
Exam included (exam voucher provided at the end of the training)

This format is ideal for professionals who want to learn quickly and efficiently while benefiting from direct contact with an expert.

Full‑day with trainer :