PECB Training & Certification
Home › Courses › Information Security › ISO/IEC 27005 Foundation
Information Security Foundation EN · CS

ISO/IEC 27005 Foundation

Grasp the fundamentals of information security risk management in line with ISO/IEC 27005. The ideal starting point to understand how risk is analysed and treated before going deeper at Risk Manager level.

2 daysof training
Foundationentry level
EN · CSlanguages
OfficialPECB exam incl.

Who is this course for?

  • Professionals starting out in security risk management
  • Members of security and compliance teams
  • Those who need to understand the vocabulary and process of ISO 27005
  • Professionals preparing for the Risk Manager level

What you'll gain

  • The PECB Certified ISO/IEC 27005 Foundation credential
  • An understanding of the security risk management process
  • The basis to approach risk assessment in ISO 27001, NIS2 and DORA
  • The starting point to move up to the Risk Manager level

Course programme

Fundamentals of security risk
  • Risk concepts; ISO/IEC 27005 and ISO 31000
  • Risk management framework and process
  • Relationship with the ISO 27001 ISMS
Process and exam
  • Risk identification, analysis and evaluation (overview)
  • Risk treatment and acceptance
  • Review and official Foundation exam

Exam, credits & certification

1 h
Duration of the official PECB exam
14 CPD
Continuing Professional Development credits granted by the course
Included
Exam, marking and first issue of the certification, included in the price

Once you pass the exam, you can apply for the "PECB Certified ISO/IEC 27005 Foundation" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the course level according to PECB. The exam duration is indicative; ask me for the exact details when you enrol.

Practise before the exam

Our own product

ISO/IEC 27005 Foundation practice exams, with a reasoned explanation for every answer.

6 full exams · 240 questions · 2 domains assessed

Try the free demo

RRSG's own material, independent from the official training and not endorsed by any certification body.

Your trainer

Ricardo Coronel Lemus, PECB trainer

Ricardo Coronel Lemus

Practising GRC / vCISO consultant · PECB Certified Trainer (CT6496)

More than 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. This is a standard I teach as a PECB Certified Trainer, and I don't approach it theoretically: I apply it day to day with real clients: that's what I bring to my coaching and exam preparation.

ISO 27001 Lead Auditor / Lead Implementer CISSPCISMCRISCCCISODORA Lead ManagerPCI DSS - PCIP
“Ricardo is skilled, thorough and self-reliant. He knows how to summarise or go deep into security issues depending on the audience: both governance questions and highly technical topics.”
Pierre-Luc M. · Cybersecurity Consulting Manager

Still in the evaluation phase?

Practical ISO 27005 guide (free). The risk management process step by step, with a 5x5 matrix and a filled risk register example.

Download the guide →

Not ready to decide? Get all the information by email

I will send you the full syllabus, available dates and the price of ISO/IEC 27005 Foundation, with no obligation.

Frequently asked questions

Do I need any prerequisites?
There are no formal prerequisites. Some prior background in the field helps, but it is not required.
What language is the exam in?
The material is available in the languages shown and you choose yours when you pay. The exam is offered in several languages and you choose yours when you request it, separately. Coaching is delivered in English to prepare you thoroughly. If you need a specific language, contact us and we will confirm it.
What is the difference between Self-Study and Self-Study + Coaching?
Self-Study includes the official PECB material, the exam and certification, at your own pace. The coaching option adds one-to-one sessions with me, as a PECB Certified Trainer for this standard: real-world case studies and guided exam preparation; I support you until you feel ready to get certified.See the full coaching programme. The coaching option includes up to 3 hours of one-to-one video sessions, spread at your own pace over the 12 months of access. See the full coaching programme.
What if I don't pass the exam?
The PECB exam includes 2 attempts: the first plus a free retake usable within the following 12 months. So a failure doesn't leave you stranded. What's more, with the coaching option we prepare for the exam together with mock exams so that you arrive with confidence.
Is Foundation or Risk Manager right for me?
Foundation gives you the conceptual basis in 2 days; Risk Manager (3 days) goes deeper and lets you carry out complete risk assessments. If you already have experience, you can go straight to the Risk Manager.
Where can I see the ISO 27005 process before enrolling?
Our free ISO 27005 guide explains the risk management process step by step, with a 5x5 matrix and a worked risk register, so you can see what the course builds on.

Ready to get certified in ISO/IEC 27005 Foundation?

Choose your option above and enrol online. A question or need some advice? Write to me or book a call.

See options and pay Write to me and I will reply