Risk Manager
ISO 31000 Risk Manager
2026 edition
Self-paced PECB training delivered via myPECB.
Global training partner Aegentra is an official PECB authorised training partner and an official CompTIA partner.
Official PECB training for applying ISO 31000:2018 risk-management principles, establishing or improving a framework and operating the risk-management process. The official agenda has three training days followed by the certification examination on Day 4.
- Typical study effort
- 25–35 hours
- CPD credits
- 21
- Course languages
- English, Spanish
Who it is for
- Risk officers, risk managers and risk analysts
- Compliance, governance and assurance professionals
- Project, programme and business-function managers with risk responsibilities
- Business continuity, resilience, technology and cybersecurity risk professionals
- Procurement and third-party risk professionals
- Consultants supporting risk assessments and framework improvement
What you will learn
- Explain how risk connects to objectives, uncertainty, value creation and value protection.
- Apply the ISO 31000 principles when designing or reviewing a risk-management approach.
- Describe leadership, integration, roles, resources, communication, evaluation and improvement within a risk-management framework.
- Define the scope, context and criteria for a risk assessment.
- Identify risk sources, events, causes, consequences, affected objectives, existing controls and opportunities.
- Analyse likelihood, consequences, uncertainty and control effectiveness using suitable evidence and techniques.
- Evaluate risk significance against approved criteria, appetite, tolerance and decision authority.
- Select and document risk-treatment options, owners, resources, target dates and expected residual risk.
- Record, report, monitor and review risks, assumptions, indicators and changes in context.
- Facilitate communication and consultation so decision makers receive relevant risk information.
Course content
Day 1 — Risk-management principles and framework
- Purpose and terminology of risk management
- Risk as the effect of uncertainty on objectives
- The ISO 31000 principles and creation and protection of value
- Leadership, integration, roles, resources and communication
- Designing, implementing, evaluating and improving the framework
Day 2 — Applying the risk-management process
- Communication and consultation
- Defining scope, context and criteria
- Risk identification, analysis and evaluation
- Assumptions, limitations and uncertainty
- Risk ownership and decision authority
Day 3 — Treatment, recording, reporting and review
- Selecting risk-treatment options and preparing treatment plans
- Residual risk, acceptance and decision authority
- Recording, reporting, monitoring and review
- Changes in context, indicators, escalation and continual improvement
- Preparation for the Day 4 certification examination
Prerequisites
- A fundamental understanding of ISO 31000 and comprehensive knowledge of risk management.
The exam
- Format
- Open-book, multiple-choice — stand-alone and scenario-based questions
- Duration
- 120 minutes
- Questions
- 60 multiple-choice questions across 3 competency domains — 12 questions on fundamental principles and concepts of risk management (20%), 14 on establishment of a risk management framework (23.33%), and 34 on implementation of a risk management process (56.67%).
- Pass mark
- 70%
What is included
Course materials
- PECB ISO 31000 Risk Manager slide deck (digital)
- 12 months access via myPECB
- Module quizzes, practice scenarios, and exam-style cases
- Risk-register, risk-appetite, and risk-treatment templates
Exam package
- Official PECB Risk Manager exam voucher
- Open-book exam, 60 multiple-choice questions, remotely proctored
- Two exam attempts (initial + one free resit)
- Eligibility to apply for the relevant PECB credential tier after passing, subject to PECB requirements