Lead Risk Manager
ISO 31000 Lead Risk Manager
2026 edition
Self-paced PECB training delivered via myPECB.
Global training partner Aegentra is an official PECB authorised training partner and an official CompTIA partner.
Develop knowledge across the full five-domain ISO 31000 Lead Risk Manager scope: principles, framework establishment, risk assessment, treatment and reporting, and monitoring, review, communication and consultation. Concludes with the official PECB examination.
- Typical study effort
- 35–45 hours
- CPD credits
- 31
- Course languages
- English
Who it is for
- Chief risk officers and senior risk leaders running enterprise programs
- Heads of internal audit, assurance, and governance
- Consultants advising boards and executives on risk frameworks
- Existing ISO 31000 Risk Managers ready to step up to lead-level
What you will learn
- Explain ISO 31000 principles and concepts across the published Lead Risk Manager scope.
- Establish and evaluate a risk management framework in a worked organisational context.
- Apply the risk management process from initiation and assessment through treatment.
- Develop risk recording and reporting evidence for worked scenarios.
- Apply monitoring, review, communication and consultation methods to course scenarios.
Course content
Module 1 — Foundations of ISO 31000:2018
- ISO 31000 history, scope, and structure
- The eight risk management principles
- ISO Guide 73 risk vocabulary
- ISO 31000 vs ISO 27005 vs COSO ERM
Module 2 — Establishing the risk management framework
- Leadership and commitment
- Integration and framework design
- Implementation and evaluation
- Roles, responsibilities and accountabilities
Module 3 — Running the risk management process
- Scope, context, and criteria
- Risk identification at portfolio and enterprise level
- Qualitative and quantitative risk analysis
- Evaluation, treatment, and residual risk
Module 4 — Risk treatment, recording and reporting
- Treatment options: avoid, transfer, mitigate, accept
- Control design, monitoring, and effectiveness testing
- Recording risk decisions and treatment evidence
- Risk reporting for worked scenarios
Module 5 — Monitoring, review, communication and consultation
- Monitoring and review methods
- Communication and consultation planning
- Continual improvement of the framework
- Worked scenarios across the fifth exam domain
Module 6 — Integration and exam prep
- Aligning ISO 31000 with ISO 27001, ISO 27005, and COSO ERM
- Case studies: financial services, healthcare, technology
- Common pitfalls in enterprise risk programs
- Exam strategy and scenario practice
Prerequisites
- Familiarity with ISO 31000 fundamentals — Foundation, Risk Manager, or equivalent industry experience is recommended.
- Several years of business, audit, or risk experience is helpful for the case studies.
The exam
- Format
- Open-book, multiple-choice — stand-alone and scenario-based questions
- Duration
- 3 hours
- Questions
- 80 multiple-choice questions across 5 competency domains — fundamental principles and concepts of risk management, establishment of the risk management framework, initiation of the risk management process and risk assessment, risk treatment and risk recording and reporting, and risk monitoring, review, communication and consultation.
- Pass mark
- 70%
What is included
Course materials
- PECB ISO 31000 Lead Risk Manager slide deck (digital)
- 12 months access via myPECB
- Module quizzes, complex scenarios, and exam-style cases
- Enterprise-risk programme templates and worked examples
Exam package
- Official PECB Lead Risk Manager exam voucher
- Open-book exam, 80 multiple-choice questions, remotely proctored
- Two exam attempts (initial + one free resit)
- Eligibility to apply across the PECB credential ladder after passing, subject to experience and PECB requirements