Skip to main content

ISO 27005 Lead Risk Manager Course – PECB Certified Australia

Instructor: the Aegentra Academy team — NV1-cleared, ISO 27001-certified · Aegentra Academy (official PECB authorised training partner)

The senior pathway in the ISO/IEC 27005 scheme — establish, maintain, and continually improve an information security risk management framework. Five days covering risk identification, analysis, evaluation and treatment, communication and monitoring, plus a full day on OCTAVE, MEHARI, EBIOS, NIST, CRAMM, and Harmonized TRA.

The PECB ISO/IEC 27005 Lead Risk Manager course costs $989 + GST in Australia through Aegentra Academy, an official PECB authorised training partner. The price includes the official PECB examination voucher, the full course materials, 12 months of myPECB access, and one free exam resit within 12 months.

ISO/IEC 27005 Lead Risk Manager course — $989 + GST, PECB-certified. The Aegentra Academy ISO/IEC 27005 Lead Risk Manager is a PECB-accredited, self-paced online program priced at $989 + GST, including the official PECB exam voucher and one free resit within 12 months. Instructor-led cohorts are also available in Melbourne and Sydney. Aegentra Academy is an official PECB authorised training partner in Australia.

This PECB-accredited course is sold and supported by Aegentra Academy — an official PECB authorised training partner in Australia. Every enrolment includes the official PECB certification exam voucher and one free resit within 12 months of purchase. Courses run online and self-paced through the myPECB platform; instructor-led cohorts and in-person delivery are also available in Melbourne and Sydney.

PECB is accredited by ANAB (ANSI National Accreditation Board) under ANSI/ASTM E2659-24, plus UKAS, IAS, and COFRAC. Your PECB credential is internationally recognised and accepted on resumes, tender responses, and procurement panels worldwide. Verify credentials through the official PECB partner directory.

Aegentra Academy courses are delivered by active practitioners — the same senior engineers who run Aegentra Academy engagements and Microsoft 365 hardening for Australian SMBs. Tax invoices with GST and ABN are issued automatically at checkout. Multi-seat team pricing is available — email Academy@aegentra.com.au for an enterprise quote. Professionals across Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra, and New Zealand enrol online.

Who should take the ISO/IEC 27005 Lead Risk Manager course?

What you will learn

By the end of the ISO/IEC 27005 Lead Risk Manager course you will be able to:

ISO/IEC 27005 Lead Risk Manager course curriculum

The ISO/IEC 27005 Lead Risk Manager syllabus runs over 5 modules — 35–45 hours · self-paced (5-day course equivalent).

Day 1 — Introduction to ISO/IEC 27005 and information security risk management

Day 2 — Risk identification, analysis, evaluation, and treatment based on ISO/IEC 27005

Day 3 — Risk communication and consultation, recording and reporting, monitoring and review

Day 4 — Risk assessment methods

Day 5 — Certification exam

Prerequisites

ISO/IEC 27005 Lead Risk Manager exam format

FormatOpen-book multiple choice — stand-alone and scenario-based questions, three options each
Duration3 hours
Questions80 multiple-choice questions across 6 competency domains
Pass mark70%
LanguageEnglish (other PECB languages available on request)

PECB credential hierarchy: Provisional Risk Manager → Lead Risk Manager → Senior Lead Risk Manager, based on professional experience and attested information security risk management hours. Valid three years, maintained through CPD credits and the annual maintenance fee.

What is included in the ISO/IEC 27005 Lead Risk Manager course

Course materials

Exam and certification package

Practitioner extras

Related ISO 27005 resources

Free companion reading for anyone studying information security risk management — the risk method behind every ISO 27001 risk assessment:

ISO/IEC 27005 Lead Risk Manager — Frequently Asked Questions

Do you run live or in-person classes for this course?

This course is sold as self-paced study, but yes — we also deliver it live. Aegentra runs instructor-led cohorts with a certified PECB trainer, and in-person classroom sessions at our Melbourne and Sydney CBD offices. For enterprise teams we deliver on-site at your office on a schedule that suits you. Live and in-person pricing depends on cohort size and the standard, so it is quoted rather than listed — email Academy@aegentra.com.au with your headcount and preferred dates and we will come back with a quote.

What is the difference between ISO/IEC 27005 Risk Manager and Lead Risk Manager?

Risk Manager is the three-day practitioner course — it trains you to run the information security risk process. Lead Risk Manager is the five-day senior pathway — it trains you to establish, maintain, and continually improve the whole framework, and gives a full day to the assessment methods. The Lead exam is broader too: six competency domains and 80 questions, against four domains for Risk Manager.

Is this course available with eLearning?

No. ISO/IEC 27005 Lead Risk Manager is offered as slide-based self-study only at $989 + GST. If you would prefer a format with recorded video lectures, the ISO/IEC 27005 Risk Manager course is available either as self-study or with eLearning.

How is the exam structured?

Eighty multiple-choice questions across six competency domains, each with three options. Half the questions measure comprehension, application and analysis; the other half measure evaluation. Questions are a mix of stand-alone and scenario-based, where one scenario carries five questions. Pass mark is 70%, and the exam is open-book.

What can I bring into the exam?

It is open-book. You may use a hard copy of the ISO/IEC 27005 standard, your training course materials (through the PECB Exams app or printed), and any personal notes taken during the course.

Which credential do I receive?

It depends on attested experience. Provisional Risk Manager requires none. Lead Risk Manager requires five years of professional experience with two of those in information security risk management, plus 300 hours of information security risk management activities. Senior Lead Risk Manager requires ten years with seven in information security risk management, plus 1,000 hours. All require signing the PECB Code of Ethics.

What is actually included in the price?

For courses delivered by a PECB partner, the training fee covers the first exam attempt, one free retake, the certification application fee, and the first year of the Annual Maintenance Fee. That cycle must be completed within 12 months of the purchase date for self-study.

How long is the certification valid?

Three years. To maintain it you need to meet the CPD requirement for your credential and pay the annual maintenance fee. The first year of that fee is included in the course price.

What CPD credits do I earn?

Thirty-one CPD credits — an attestation of course completion is issued on finishing the course. These count toward the CPD requirements of ISACA, IIA Australia, and other professional bodies on submission.

Do I need to do Risk Manager before Lead Risk Manager?

No. PECB expects a fundamental understanding of ISO/IEC 27005 plus knowledge of risk assessment and information security, but the Risk Manager course is not a formal prerequisite. If information security risk is genuinely new to you, starting at Risk Manager is the faster total path.

Is GST included in the price?

No. Prices are shown exclusive of GST. Australian GST is calculated and added at checkout, and Stripe issues a compliant tax invoice with our ABN automatically.

Can my employer pay or reimburse?

Yes. Either complete checkout yourself and forward the Stripe tax invoice for reimbursement, or write to Academy@aegentra.com.au and we will issue an invoice direct to your organisation with payment terms. Groups of five or more receive a discount.

When can I start the course?

Immediately after payment. The Academy team confirms your seat with PECB and you receive login details by email — usually within one business day.

How long do I have access to the course?

You have 12 months of access from enrolment. That window covers the course material, the official PECB exam, and one free resit if you need it.

What if I fail the exam?

One PECB-issued resit is included in your enrolment at no extra cost. Most learners who use the included study materials and sit the resit within 30 days pass on their second attempt.

Can my employer be invoiced directly?

Yes. Either complete the checkout yourself and forward the Stripe tax invoice to your employer for reimbursement, or write to Academy@aegentra.com.au and we will issue an invoice to your organisation with payment terms.

Is the credential recognised internationally?

Yes. PECB is an accredited certification body recognised globally. The credential is the same one issued through any authorised PECB training partner — recognised by employers, audit bodies, and government tenders worldwide.

Do you offer group bookings for teams?

Yes. Groups of five or more receive a discount and can be enrolled with a single invoice. Write to Academy@aegentra.com.au with the course, number of seats, and start window.

What is your refund policy?

All enrolments are non-refundable. Once payment is confirmed your PECB seat is provisioned and the course materials become available, so refunds cannot be issued. Please review the course details carefully before purchase, and email Academy@aegentra.com.au if you have questions before enrolling.