PECB Training & Certification
Home › Courses › Information Security › ISO/IEC 27005 Foundation
Information Security Foundation EN · CS

ISO/IEC 27005 Foundation

Grasp the fundamentals of information security risk management in line with ISO/IEC 27005. The ideal starting point to understand how risk is analysed and treated before going deeper at Risk Manager level.

2 daysof training
Foundationentry level
EN · CSlanguages
OfficialPECB exam incl.

Who is this course for?

  • Professionals starting out in security risk management
  • Members of security and compliance teams
  • Those who need to understand the vocabulary and process of ISO 27005
  • Professionals preparing for the Risk Manager level

What you'll gain

  • The PECB Certified ISO/IEC 27005 Foundation credential
  • An understanding of the security risk management process
  • The basis to approach risk assessment in ISO 27001, NIS2 and DORA
  • The starting point to move up to the Risk Manager level

Course programme

Fundamentals of security risk
  • Risk concepts; ISO/IEC 27005 and ISO 31000
  • Risk management framework and process
  • Relationship with the ISO 27001 ISMS
Process and exam
  • Risk identification, analysis and evaluation (overview)
  • Risk treatment and acceptance
  • Review and official Foundation exam

Exam, credits & certification

1 h
Duration of the official PECB exam
14 CPD
Continuing Professional Development credits granted by the course
Included
Exam, marking and first issue of the certification, included in the price

Once you pass the exam, you can apply for the "PECB Certified ISO/IEC 27005 Foundation" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the course level according to PECB. The exam duration is indicative; ask me for the exact details when you enrol.

Your trainer

Ricardo Coronel Lemus, PECB trainer

Ricardo Coronel Lemus

Practising GRC / vCISO consultant · PECB Certified Trainer (CT6496)

More than 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. This is a standard I teach as a PECB Certified Trainer, and I don't approach it theoretically: I apply it day to day with real clients: that's what I bring to my coaching and exam preparation.

ISO 27001 Lead Auditor / Lead Implementer CISSPCISMCRISCCCISODORA Lead ManagerPCI DSS - PCIP
“Ricardo is skilled, thorough and self-reliant. He knows how to summarise or go deep into security issues depending on the audience: both governance questions and highly technical topics.”
Pierre-Luc M. · Cybersecurity Consulting Manager

Still in the evaluation phase?

Practical ISO 27005 guide (free). The risk management process step by step, with a 5x5 matrix and a filled risk register example.

Download the guide →

Not ready to decide? Get all the information by email

I will send you the full syllabus, available dates and the price of ISO/IEC 27005 Foundation, with no obligation.

Frequently asked questions

Do I need any prerequisites?
There are no formal prerequisites. Some prior background in the field helps, but it is not required.
What language is the exam in?
The official PECB material and exam for this course are available in the languages shown on this page. Coaching is delivered in English to prepare you thoroughly. If you need a specific language, contact us and we will confirm it.
What is the difference between Self-Study and Self-Study + Coaching?
Self-Study includes the official PECB material, the exam and certification, at your own pace. The coaching option adds one-to-one sessions with me, as a PECB Certified Trainer for this standard: real-world case studies and guided exam preparation; I support you until you feel ready to get certified.See the full coaching programme. The coaching option includes up to 3 hours of one-to-one video sessions, spread at your own pace over the 12 months of access. See the full coaching programme.
What if I don't pass the exam?
The PECB exam includes 2 attempts: the first plus a free retake usable within the following 12 months. So a failure doesn't leave you stranded. What's more, with the coaching option we prepare for the exam together with mock exams so that you arrive with confidence.
Is Foundation or Risk Manager right for me?
Foundation gives you the conceptual basis in 2 days; Risk Manager (3 days) goes deeper and lets you carry out complete risk assessments. If you already have experience, you can go straight to the Risk Manager.

Ready to get certified in ISO/IEC 27005 Foundation?

Choose your option above and enrol online. A question or need some advice? Write to me or book a call.

See options and pay Book 30 minutes with me