This advanced-level training course develops your competence in the key areas of information risk management; covering risk assessment, analysis, treatment and review.
It will teach you:
Gain practical experience in carrying out an effective risk assessment process as defined by ISO/IEC 27005:2011 through discussion, case studies and role play.
Learn how a risk assessment works in action using a combination of formal training, practical exercises and relevant case studies.
Choose whether you attend Live Online or in person at one of our training venues throughout the UK.
Get to grips with the key ISO 27005 and BS 7799-3 risk assessment processes.
100%
of delegates passed first time
97%
were happy with the pace of the course
97%
thought adequate course materials were provided
99%
agreed the course content was relevant.
“Fantastic training to compile all my old risk management know-how, in a very good structured way but also according to the ISO regulations. I am going to recommend it to my colleagues and friends.”
- Kirsty
“Great work with all of us, engaging everyone, I would highly recommend Damian. I would also like to add that the training material was really helpful, the exercises, friendly and easy to navigate through. As mentioned, Damian did a great job especially at engaging everyone.”
- Anonymous
“Training and keeping engagement on topics like risk is never easy, but the course trainer gave good examples and experiences which helped to explain the course material. Plenty of opportunities were given for people to ask for help, and that was also outside of the webex if they did not feel comfortable in asking in front of the group which was good. I would be very happy to attend another course delivered by the trainer, as he was very informative and engaging. ”
- Anonymous
“Wonderful trainer, great location and great food - would come back and recommend to colleagues!”
- Emma McMechan, Deputy SIRO/Security Advisor, Land Registry
“Damian was excellent presenter, very engaging and involving all delegates and providing apt examples and discussion points.”
- Kamala Bandepalli, GRC consultant
This course is aimed at those who have attended the CISMP, or Certified ISO 27001 ISMS Lead Implementer courses and want to develop their practical risk management skills. For example:
Find out how the Certified ISO 27005 ISMS Risk Management Training Course will help you start or enhance your knowledge and career.
This course is an essential component of the following learning paths:
You will need a laptop for the duration of your course and exam. Full details on how to access the exam will be provided by email 1–2 days before sitting the exam.
Day 1: 9:30am – 5:00pm
Day 2: 9:15am – 5:00pm
Day 3: 9:15am – 5:00pm
There are no formal entry requirements but it is assumed that you have taken the Certified ISO 27001 ISMS Lead Implementer or CISMP training course or you have a good working knowledge of ISO 27001 gained through practical experience.
We strongly recommend you purchase and read the standard prior to attending the course:
We also recommend that you purchase and read the following textbooks:
Attendees take the ISO 17024-certificated, ISO 27005 Certified ISMS Risk Management (CIS RM) exam set by IBITGQ (International Board for IT Governance Qualifications). There is no extra charge for this exam.
This course is equivalent to:
21
CPD points
ISO 27005 Certified ISMS Risk Management (CIS RM).
This course holds accreditation from IBITGQ (International Board for IT Governance Qualifications), a renowned authority in personnel certification within the field of IT governance.
As a premier personnel certification body, IBITGQ specialises in certifying individuals who demonstrate exceptional proficiency in IT governance practices.
IBITGQ maintains accreditation to the ISO/IEC 17024:2012 standard, a globally recognised benchmark for conformity assessment. Accreditation by the International Accreditation Service (IAS) further underscores the course's commitment to meeting stringent certification requirements.
ISO 17024 certification is esteemed within the industry and universally acknowledged by employers worldwide. By aligning with this standard, our course ensures that your qualifications are not only recognised but also highly valued by employers across diverse sectors.
Upon successful completion of the course, you have the opportunity to validate your professional expertise by registering your qualification on the esteemed IBITGQ/GASQ successful candidate register. This platform serves as a testament to your commitment to excellence in IT governance, setting you apart as a distinguished professional in the field.
Delegates must bring a form of photographic ID with them as the invigilator my request to check it prior to the exam.
Yes, if you are unsuccessful on the first attempt, you can retake the exam for an additional fee. You can email us to schedule the retest.
We want you to learn, qualify and progress, and we are committed to providing learning options for all scenarios: deadline-driven, career-orientated, company-wide or interest-led.
Structured learning, with clear direction and guidance from expert practitioners:
Learn and absorb material in a way that works for you:
The most effective learning method for professionals:
Learning as a team and building a culture of awareness: