EasyELEarning Academy · PECB Authorized Partner
ISO/IEC 27005:2022 Risk Manager – IT Risk Analysis
Develop a practical approach to information security risk assessment, treatment planning and communication with risk owners.
Duration
5 days · 4 training days + examinationDelivery
Live online or in personCredential
PECB examination & certificationContent and learning objectives
- Scope and assessment criteria
- Threats, vulnerabilities and consequences
- Risk analysis and evaluation
- Treatment plans and risk communication
Who should attend?
Professionals working in ai & risk management, with responsibilities appropriate to the selected course level.
Prerequisites
Subject knowledge appropriate to the course level is recommended. Specific PECB entry requirements will be checked before booking.
Course structure and delivery
The five-day Academy programme comprises four training days and the examination. Official PECB course content is complemented by guided exercises, practical cases, in-depth study and examination preparation. Online and classroom delivery cover the same learning objectives.
Online sessions are delivered live using alfaview. The Odoo portal provides course information and materials. Dates, teaching language and classroom location are agreed before the course starts.
Materials, examination and certification
The full course includes official PECB training materials, tuition in the selected format and the first PECB examination attempt.
The course prepares you for the PECB examination for ISO/IEC 27005:2022 Risk Manager. After passing the exam, you can apply for the corresponding PECB credential. PECB assesses eligibility and awards the credential. Depending on the credential level, additional evidence of professional and relevant practical experience is required. Attendance or a passed exam alone does not guarantee the full credential.
Price and booking
Live online: €2,490. In person: €3,990. Select your delivery format above and book directly in the shop. We agree the course date with you.
Teaching and examination language
Teaching languages: German, English or Hungarian. The selected teaching language is confirmed when scheduling the course. Hungarian is a teaching language for this PECB course only and is not a promised examination language. The examination language and the language of official PECB materials are agreed separately before booking.
Self-employed? Explore KOMPASS before booking.
KOMPASS may support suitable professional development for eligible solo self-employed people in Germany. Arrange a consultation with us to discuss course selection. Mandatory funding advice and eligibility checks are provided by an official KOMPASS advisory centre. Only make a binding booking after the qualification voucher has been issued. Training must include at least 20 hours; not every offer meets this condition. Funding eligibility is assessed individually.
PECB course profile and credential requirements
Frequently asked questions about this course
How should I choose between ISO/IEC 27005 Risk Manager and CRISC?
Compare the work you want to develop and each examination's scope. CRISC includes governance, assessment and reporting, while this ELA offering focuses on ISO/IEC 27005. Do not choose solely on assumed name recognition. Also compare experience requirements and the long-term conditions attached to each credential.
How can I assess whether I know enough for the Manager focus?
Explain an information security case without relying on a list of technical terms: what information is involved, what might happen, which consequences matter and what decision is needed? If you can connect these points clearly, you have a useful basis for deeper study. Discuss gaps with us before choosing.
Must I immediately commit to one risk assessment method?
For preparation, first identify the decision needed and the information available. Then compare methods by how clearly they support the case. A complex model is not automatically better. Participants should understand assumptions, ratings and limitations, and the results should be possible to review later.
What should a risk register contain beyond a risk label?
A traceable scenario connects affected assets, possible events and consequences. NIST describes registers as a way to bring that information together for assessment and communication. For your practice register, add the decision needed and unresolved assumptions. This turns data loss, for example, into something meaningful to discuss.
Who should decide whether a remaining security risk is accepted?
In your practice case, first establish who owns the affected business objective and who has decision authority. The person describing a technical problem is not automatically authorised to accept risk. Present consequences, options and remaining uncertainty so the accountable decision-maker can understand them.
What experience does the regular ISO/IEC 27005 Risk Manager require?
PECB specifies two years of professional experience, including one in information security risk management, plus 200 hours of relevant work. Educational, examination and application conditions also apply. A provisional level may be appropriate if experience is missing. Check the suitable credential against your actual evidence beforehand.
Why does ELA offer this Manager course over five days?
Five days refers to the ELA format with four teaching days and the examination, not a universal rule for every PECB offering. Published agendas may allocate time differently. We therefore agree the detailed teaching schedule and examination arrangements with you before you finalise your attendance plans.
Can I attend in Hungarian if my course materials are in English?
Teaching language and the language of official PECB materials are arranged separately. Hungarian live teaching may therefore be combined with materials in another language; the exact combination is confirmed before booking. The same applies to the examination. Choose a combination in which you can confidently understand technical terminology.
Selected courses compared
Which content fits your goals, which skills are practised, and what does the credential demonstrate? This selection compares our course with two specific alternatives.
On smaller screens, scroll the table sideways to see all columns.
| Course offer | Content | Skills development | What the credential demonstrates |
|---|---|---|---|
| EasyELEarning Academy This course offer | Context, threats, vulnerabilities, assessment, treatment and risk acceptance, complemented by communication, updates, guided exercises and practical cases involving organisational information security risks. | The objective is to assess security risks transparently, select suitable responses and communicate results and remaining uncertainties clearly to relevant stakeholders. | PECB examination followed by application; the regular Manager credential requires relevant professional and activity evidence. Attendance alone does not award that title. |
| SGS Academy Germany ISO/IEC 27005 Risk Manager Self-Study Training Course (PECB) Same PECB level; self-study format. Provider’s course | Self-study addressing ISO/IEC 27005 and ISO 31000, risk assessment, treatment, communication and reporting, alongside an overview of different risk assessment methods. | Learning objectives include applying risk management processes, establishing and maintaining their organisational framework, and planning communication and consultation with relevant stakeholders. | PECB examination and separate application; SGS lists Provisional Risk Manager and Risk Manager credentials, awarded only after their respective conditions are satisfied. |
| Trigonum ISO/IEC 27005 Risk Manager Same PECB Risk Manager focus. Provider’s course | Addresses ISO/IEC 27005, ISO 31000 and other assessment methods; exercises, case studies and quizzes support practical work with information security risks. | Trigonum lists developing a risk management framework, identifying, assessing and treating risks, and communicating results with stakeholders among its learning objectives. | The offer names a PECB examination and Risk Manager credential. Detailed certification experience requirements are not stated on this course page. |
Checked: 31 October 2026. Based on the linked provider information. This selection is not a complete market overview. Related courses are identified; scope, entry requirements, teaching languages and examination languages may differ. The table describes learning objectives and credential types, without guaranteeing learning outcomes or general equivalence. Current offer and certification conditions apply. Official course names retain their original wording.