ISO/IEC 27005 Foundation

Sale!

Course Outline

The ISO/IEC 27005 Foundation course begins by introducing the core concepts of an information security management system and the role it plays within an organisation. Learners explore the principles outlined in ISO/IEC 27001:2022, gaining an understanding of how information security risks are identified, managed, and aligned with broader organisational objectives. This first stage builds the essential knowledge required to appreciate how risk management underpins an effective and resilient ISMS.

The second part of the course focuses on the specific requirements of an information security management system and how these are applied in practice. Participants examine the processes, controls, and responsibilities involved in meeting ISO/IEC 27001:2022 expectations, ensuring they understand how risk treatment and continual improvement fit into the wider framework. The course concludes with the certification exam, allowing learners to validate their understanding and demonstrate foundational competence in information security risk management.

Prerequisites

There are no prerequisites to participate in this training course.

Learning Objectives

Upon successful completion of the ISO/IEC 27005 Foundation course, participants will be able to describe the key concepts, principles, and definitions related to information security risk management, providing a solid foundation for applying risk management practices effectively. Participants will also be able to interpret the guidelines of ISO/IEC 27005, enabling them to manage information security risks in accordance with the standard. Finally, attendees will gain the ability to identify and apply approaches, methods, and techniques for implementing and managing an information security risk management programme within their organisation.

Specialist Skills Hub are a proud partner of ELCAS, supporting those leaving the armed forces to transition into a career in the tech industry. Find out more here.

Why Should You Attend?

The ISO/IEC 27005 Foundation course is a two-day training programme that introduces participants to the information security risk management process outlined in ISO/IEC 27005. The course provides a structured overview of the standard, covering key aspects such as establishing context, risk assessment and treatment, communication and consultation, recording and reporting, and monitoring and review of information security risks.

Upon completing the training, participants can take the exam and, if successful, apply for the PECB Certificate Holder in ISO/IEC 27005 Foundation designation. This certification demonstrates a general understanding of ISO/IEC 27005 guidelines and the fundamental principles of information security risk management.

Specialist Skills Hub are a BCS approved training centre.

Who Should Attend?

The ISO/IEC 27005 Foundation training course is designed for risk management professionals seeking to strengthen their knowledge of information security risk management. It is also suitable for professionals who want to become familiar with the guidelines of ISO/IEC 27005 and understand how to manage information security risks effectively. The course benefits personnel responsible for managing information security risks within their area of responsibility, as well as individuals interested in pursuing a career in information security risk management.

Specialist Skills Hub are proud to be a living wage employer.

General Information

The ISO/IEC 27005 Foundation course offers a comprehensive learning experience, with all certificate and examination fees included in the course price. Learners receive detailed training material containing more than 200 pages of guidance, explanations, and practical examples to support their understanding of information security risk management.

Participants who complete the course are awarded an attestation of course completion, which carries 14 CPD credits and contributes to their ongoing professional development. If a learner does not pass the exam on their first attempt, they are able to retake it once within a 12-month period at no additional cost, providing reassurance and flexibility as they work towards certification.

Specialist Skills Hub are an approved training partner.

ELCAS Learners? Contact Us Today to Enquire About Your Course

Examination & Certification

The examination for the ISO/IEC 27005 Foundation course is designed to meet the standards of the PECB Examination and Certificate Programme. It assesses knowledge across two key domains: the foundational principles of information security risk management, and the methods and processes used to manage information security risks. To be eligible for the examination, candidates must first complete the PECB ISO/IEC 27005 Foundation training course. Once the course has been completed, candidates may sit the exam, and those who pass will be able to apply for the PECB Certificate Holder in ISO/IEC 27005 Foundation. This certification serves as an entry-level qualification for individuals beginning their development in information security risk management.

There are no requirements for prior professional experience or previous involvement in risk management projects. The only obligations candidates must meet before obtaining the certificate are the completion of the training course, successful examination performance, and submission of the certification application. To receive the certificate, candidates must pass the PECB ISO/IEC 27005 Foundation exam and agree to the PECB Code of Ethics. No further experience or additional conditions are required.

Dates & Locations

The course will be delivered live online via Microsoft Teams, offering a flexible and accessible learning experience. Participants can join from any location, gaining the benefits of interactive, instructor-led training without the need for travel. Dates are scheduled throughout the year. See the scheduled dates above or contact us to enquire about alternative dates.

Start Your Learning Now!

Our eLearning training courses are delivered by experienced trainers from all around the world. Each training course is divided into video sections and subsections. Videos contain animations to support what the trainer is lecturing — the animations correspond to the sections provided in the traditional mode of training. To keep our candidates engaged, we have incorporated quizzes into our eLearning training courses.