Risk Management: Certified ISO 27005 Risk Manager

- You will acquire the knowledge necessary for the implementation, management and maintenance of an ongoing Risk Management program.
- You will understand the concepts, approaches, standards, methods and techniques, allowing an effective management of risk according to ISO 27005.
- You will understand the relationship between the Information Security Management System (ISMS) (including Risk Management), the security controls and how to comply with the requirements of different stakeholders of your organization.
- How to interpret the requirements of ISO 27001 on Information Security Risk Management.
- How to acquire the competence to implement, maintain and manage an ongoing Information Security Risk Management program according to ISO 27005.
- You will acquire the competence to effectively advise organisations / your organization on the best practices in Information Security Risk Management.

Based on practical exercises and case studies, you acquire the necessary knowledge and skills to perform an optimal Information Security Risk Assessment and manage risks in time by being familiar with their lifecycle. You will learn the different methods of risk assessment used on the market e.g.: CRAMM, EBIOS, MEHARI, OCTAVE and Microsoft Security Risk Management Guide.

ISO 27005 is an essential standard for those who want to manage their risks effectively and is, in particular, a must for those who want to comply with the popular Information Security Management systems standard ISO 27001. The international standard ISO 27005 is applicable to all types of organisations (e.g. commercial enterprises, government agencies, non profit organizations) that intend to manage the risks that could compromise their organisation's information security.

There are no specific prerequisites for understanding the Risk Management programme and successfully pass the ISO 27005 Risk Manager exam.