EasyELEarning Academy · PECB Authorized Partner
ISO/IEC 27005:2022 Foundation – IT Risk Management
Understand the foundations of information security risk management and how risks are identified, assessed and treated in an organisational context.
Duration
2 daysDelivery
Live online or in personCredential
PECB examination & certificationContent and learning objectives
- Information security risk concepts
- Context and risk criteria
- Identification and assessment
- Risk treatment and monitoring
Who should attend?
Professionals working in ai & risk management, with responsibilities appropriate to the selected course level.
Prerequisites
No formal course prerequisites specified by PECB.
Course structure and delivery
The full course follows the 2-day PECB agenda. Learn live with a qualified trainer through exercises, discussion and practical cases. Online and classroom delivery cover the same content. Examination scheduling is agreed in line with the course agenda.
Online sessions are delivered live using alfaview. The Odoo portal provides course information and materials. Dates, teaching language and classroom location are agreed before the course starts.
Materials, examination and certification
The full course includes official PECB training materials, tuition in the selected format and the first PECB examination attempt.
The course prepares you for the PECB examination for ISO/IEC 27005:2022 Foundation. After passing the exam, you can apply for the corresponding PECB credential. PECB assesses eligibility and awards the credential. This credential does not require professional or project experience. PECB examination and certificate rules apply.
Option: 4 hours of exam preparation
An optional four-hour live exam preparation session is available for €650. It is intended for participants who are already studying independently and does not replace the complete PECB course. Materials and examination arrangements for this option are agreed separately in advance.
Teaching and examination language
Teaching languages: German, English or Hungarian. The selected teaching language is confirmed when scheduling the course. Hungarian is a teaching language for this PECB course only and is not a promised examination language. The examination language and the language of official PECB materials are agreed separately before booking.
Self-employed? Explore KOMPASS before booking.
KOMPASS may support suitable professional development for eligible solo self-employed people in Germany. Arrange a consultation with us to discuss course selection. Mandatory funding advice and eligibility checks are provided by an official KOMPASS advisory centre. Only make a binding booking after the qualification voucher has been issued. Training must include at least 20 hours; not every offer meets this condition. Funding eligibility is assessed individually.
PECB course profile and credential requirements
Frequently asked questions about this course
What does ISO/IEC 27005 add to ISO/IEC 27001 knowledge?
ISO/IEC 27005 explains information security risk management, supporting an ISMS based on ISO/IEC 27001. For your learning choice, ask whether you need the whole management-system picture or a closer understanding of how risk assessments and responses are justified. Foundation introduces this risk perspective.
Do I need hacking skills to start learning information security risk?
Understanding a business process and its information is a more useful starting point than operating attack tools. Describe who can access customer data and what its loss would mean, for example. Technical specialists can contribute detail; reaching a shared understanding of consequences remains a separate task.
What is the difference between a threat, a vulnerability and a risk?
A threat can cause harm, while a vulnerability can enable it. Risk connects a possible event with its likelihood and effects. For a study example, consider an unprotected access point: describe the weakness, but also the affected information and potential consequences for the business.
Do I need to start with a complete inventory of every server and file?
For an initial learning exercise, choose a clearly bounded information flow, such as sending a customer quotation. Ask what information is needed, who processes it and where handovers occur. Practise those relationships before expanding the scope. An inventory alone does not explain the impact of a security event.
Why not simply implement as many security controls as possible?
For preparation, relate one control to a specific scenario: which event should it influence, and what consequences could remain? Without that connection, judging its value is difficult. Ask not only which control exists, but which actual problem it addresses and what remains unresolved.
How can I practise risk thinking without confidential company data?
Invent a small business with an online ordering system and a few employees. Describe a possible event, such as accidental disclosure of order data, and discuss its consequences. Label your assumptions. This fictional example supports practical reasoning without revealing real customer information or internal vulnerabilities.
Can I take ISO/IEC 27005 Foundation without prior risk management experience?
PECB lists no specific entry prerequisites for Foundation, and the credential requires no professional or project experience. The exam and application remain necessary. To get started, practise basic terms using a simple data flow rather than jumping straight into complex scoring models or large risk registers.
How does Foundation work with Hungarian teaching?
The ELA offering lasts two days including the examination, live online or in person. Hungarian is one available teaching language, alongside German and English. Examination and official PECB-material languages are agreed separately. A Hungarian examination is not promised as part of the offering.
Selected courses compared
Which content fits your goals, which skills are practised, and what does the credential demonstrate? This selection compares our course with two specific alternatives.
On smaller screens, scroll the table sideways to see all columns.
| Course offer | Content | Skills development | What the credential demonstrates |
|---|---|---|---|
| EasyELEarning Academy This course offer | Information security risk foundations covering context, assessment criteria, identification, analysis, treatment and monitoring, with live teaching and exercises exploring the process. | The learning objective is to classify information security risks, explain the process stages and describe their relationship with information security management. | Personal PECB Foundation credential after passing the examination and applying; no professional or project experience required. PECB's award conditions apply. |
| SGS Academy Germany ISO/IEC 27005 Foundation Self-Study Training Course (PECB) Same PECB level; self-study format. Provider’s course | Self-study covering information security risk concepts and processes, including context, assessment, treatment, communication and the ongoing monitoring and review of risks. | SGS lists explaining risk concepts, interpreting ISO/IEC 27005 guidance and recognising approaches for an information security risk management programme as learning outcomes. | Passing the examination enables application for the PECB Foundation credential; award requires meeting its conditions and demonstrates knowledge of risk management guidance. |
| Trigonum ISO/IEC 27005 Foundation Same PECB Foundation focus. Provider’s course | The course explains the standard's structure and risk management process, covering context, assessment, treatment, communication, reporting, monitoring and review of risks. | The stated objectives are explaining core risk concepts, interpreting ISO/IEC 27005 guidance and identifying methods for establishing information security risk management. | Following attendance and a passed examination, learners can apply for the PECB Foundation credential, demonstrating general knowledge of information security risk guidance. |
Checked: 31 October 2026. Based on the linked provider information. This selection is not a complete market overview. Related courses are identified; scope, entry requirements, teaching languages and examination languages may differ. The table describes learning objectives and credential types, without guaranteeing learning outcomes or general equivalence. Current offer and certification conditions apply. Official course names retain their original wording.