ISO/IEC 27005 Foundation

The ISO/IEC 27005 Foundation training course provides an introduction to the fundamental concepts and principles of information security risk management, as outlined in ISO/IEC 27005.

Why Should You Attend?

ISO/IEC 27005 Foundation is a two-day training course that focuses on the information security risk management process introduced by ISO/IEC 27005 and the structure of the standard. It provides an overview of the guidelines in ISO/IEC 27005 for managing information security risks, including establishing context, assessing risk, treating risk, communicating and consulting, recording and reporting, and monitoring and reviewing.

After attending the training course, you can sit for the exam. If you successfully pass the exam, you can apply for the “PECB Certificate Holder in ISO/IEC 27005 Foundation” designation. This certificate demonstrates that you have a general knowledge of ISO/IEC 27005 guidelines for information security risk management.

Learning Objectives

Upon successful completion of this training course, you will be able to:

• Describe the main risk management concepts, principles, and definitions
• Interpret the guidelines of ISO/IEC 27005 for managing information security risks
• Identify approaches, methods, and techniques used for the implementation and management of an information security risk management program

Educational Approach

The training course is participant-centered and:

• Contains lecture sessions illustrated with examples and discussions
• Encourages interaction between participants through questions and suggestions
• Includes quizzes with a similar structure to the exam

Prerequisites

There are no prerequisites to participate in this training course.