Foundation
ISO 31000 Foundation
2026 edition
Self-paced PECB training delivered via myPECB.
Global training partner Aegentra is an official PECB authorised training partner and an official CompTIA partner.
Build a working understanding of ISO 31000:2018 — the international standard for enterprise risk management. Foundation covers the eight risk principles, the framework lifecycle, the risk management process, and the ISO Guide 73 risk vocabulary. The right starting point before Risk Manager or Lead Risk Manager.
- Typical study effort
- 8–12 hours
- CPD credits
- 14
- Course languages
- English
Who it is for
- New entrants to risk, governance, audit, or compliance roles
- Operational managers who want a shared risk vocabulary with their risk team
- Anyone preparing to step up to ISO 31000 Risk Manager or Lead Risk Manager
What you will learn
- Explain the purpose, scope, and benefits of ISO 31000:2018.
- Apply the eight ISO 31000 risk management principles.
- Describe the risk management framework and its lifecycle.
- Walk through the risk management process — establishing context, identifying, analysing, evaluating, treating, monitoring, and reviewing risk.
- Use ISO Guide 73 risk vocabulary consistently with auditors and the business.
Course content
Module 1 — Introduction to risk management
- What risk is and why ISO 31000 matters
- History and structure of ISO 31000:2018
- How ISO 31000 sits next to ISO 27005 and COSO ERM
- ISO Guide 73 risk vocabulary
Module 2 — Principles of risk management
- The eight ISO 31000 principles
- Integrating risk into governance and decision-making
- Customised, inclusive, dynamic risk practice
- Continual improvement and human factors
Module 3 — The risk management framework
- Leadership and commitment
- Designing the framework
- Implementing, evaluating, and improving the framework
- Roles, responsibilities, and accountabilities
Module 4 — The risk management process
- Communication, consultation, scope, context, and criteria
- Risk identification techniques
- Risk analysis and evaluation
- Risk treatment, monitoring, and review
Module 5 — Certification and exam prep
- Risk culture and reporting basics
- How ISO 31000 plugs into ISO 27001 risk treatment
- Worked examples and mini-cases
- Exam strategy and practice questions
Prerequisites
- None — Foundation is the entry-level pathway and assumes no prior risk or audit experience.
The exam
- Format
- Multiple-choice
- Duration
- 1 hour
- Questions
- 40 multiple-choice questions across 2 competency domains — fundamental principles and concepts of risk management, and the risk management framework and process. Each question has three options with one correct response.
- Pass mark
- 70%
What is included
Course materials
- PECB ISO 31000 Foundation slide deck (digital)
- 12 months access via myPECB
- Module quizzes and practice questions
- ISO 31000 principles and process quick-reference
Exam package
- Official PECB Foundation exam voucher
- Two exam attempts (initial + one free resit)
- Eligibility to apply for the Foundation certificate after passing, subject to PECB approval