Day 1: Introduction, risk management program according to ISO 27005

Concepts and definitions related to risk management

Risk management standards, frameworks and methodologies 

Implementation of an information security risk management program

Understanding an organization and its context

Day 2: Risk identification and assessment, risk evaluation, treatment, acceptance, communication and surveillance according to ISO 27005

Risk identification 

Risk analysis and risk evaluation

Risk assessment with a quantitative method

Risk treatment

Risk acceptance and residual risk management

Information Security Risk Communication and Consultation

Risk monitoring and review

Day 3: Exam and risk assessment methodologies according to IEC/ISO 31010

Certified ISO/IEC 27005 Risk Manager Exam (2 hours)

Brainstorming

DELPHI technique

HAZOP – Hazard & Operability Analysis

SWIFT – The Structured ‘What If’ Technique

HACCP - Hazard Analysis Critical Control Point

Scenario analysis

FMEA & FMECA analysis

FTA analysis

"Taken from PECB <https://pecb.com

Risk managers 

Persons responsible for information security or conformity within an organization

Members of the information security team

IT consultants

Staff implementing or seeking to comply with ISO 27001 or involved in a risk management program

To understand the concepts, approaches, methods and techniques allowing an effective risk management according to ISO 27005 and IEC/ISO 31010

To interpret the requirements of ISO 27001 on information security risk management

To understand the relationship between the information security risk management, the security controls and the compliance with the requirements of different stakeholders of an organization

To acquire the competence to implement, maintain and manage an ongoing information security risk management program according to ISO 27005

To acquire the competence to effectively advise organizations on the best practices in information security risk management

Day 1: Introduction, risk management program according to ISO 27005

Day 2: Risk identification and assessment, risk evaluation, treatment, acceptance, communication and surveillance according to ISO 27005

Day 3: Exam and risk assessment methodologies according to IEC/ISO 31010

شهادة معتمدة من البورد البريطاني للتقييم المهني ( PECB( Professional Evaluation And Certification Board والمعتمد من معهد المعايير الوطنية الامريكية ANSI

Certified ISO/IEC 27005 Risk Manager