How much does the ISO 31000 Foundation course cost in Australia?
$379 + GST, and that is the whole cost. The official PECB examination voucher is included, so there is no separate exam fee later, and you get two attempts — the initial sit plus one free resit within 12 months — along with 12 months of myPECB access. Typical effort is 8–12 hours of self-paced study, and the course carries 14 CPD credits.
Aegentra Academy is an official PECB authorised training partner, and prices are quoted in Australian dollars ex-GST, with a tax invoice showing GST and ABN issued at checkout.
Can an organisation be ISO 31000 certified?
No — and this is the single most important thing to understand before you buy anything. ISO 31000 is guidance, not a certifiable management system standard. There is no Stage 1 / Stage 2 audit, no certification body issues an ISO 31000 certificate to a company, and no organisation is “ISO 31000 certified”. Any vendor offering organisational ISO 31000 certification is selling something that does not formally exist.
What does exist is individual certification. PECB certifies people — Foundation, Risk Manager and Lead Risk Manager — and those are the credentials Australian tender panels and hiring managers actually ask for. Foundation certifies you, not your employer.
The reason ISO 31000 works this way is deliberate. ISO wrote it to apply to any organisation of any size in any sector, and to stay that universal it avoids prescriptive “shall” requirements. Without them there is nothing concrete for an auditor to raise a nonconformity against. If you need a certifiable risk-adjacent standard, that is ISO/IEC 27001 for information security — see the ISO 27001 Foundation course. If you are researching what risk certification costs an organisation in Australia, the ISO 31000 certification guide for Australia sets out the whole picture, including why the organisational side of the question has no price.
What is on the ISO 31000 Foundation exam?
40 multiple-choice questions across 2 competency domains, closed book, 70% to pass. The domains are fundamental principles and concepts of risk management, and the risk management framework and process. Each question has three options with one correct answer, mixing stand-alone questions with scenario-based ones that share a short case.
Foundation is the only ISO 31000 level sat closed book. No reference material is permitted — not the standard, not your course notes. Risk Manager and Lead Risk Manager are both open book. That single difference should shape how you study: at Foundation you are being tested on recall of the vocabulary and the shape of the framework, so ISO Guide 73 terminology needs to be genuinely memorised rather than looked up.
These figures come from PECB’s published candidate handbook for the ISO 31000 Foundation examination, not from another scheme’s specification. One thing the handbook does not give is a duration, so none is quoted here — the only times it mentions are the 30-minute arrival window and the extra allowance for non-native speakers.
Is ISO 31000 the same as AS ISO 31000?
Yes. In Australia the standard is published by Standards Australia as AS ISO 31000:2018, an identical adoption of ISO 31000:2018 — same eight principles, same framework, same process. If a position description, tender or internal policy asks for AS ISO 31000, PECB ISO 31000 training covers it.
One detail trips people up. The previous edition was AS/NZS ISO 31000:2009, a joint Australian and New Zealand standard. For the 2018 revision it was published as an Australian Standard rather than a joint one, so the “/NZS” was dropped. A document still citing AS/NZS ISO 31000 as current is referring to a superseded edition — worth knowing if you are reviewing an old risk policy.
Australia has unusual standing here: AS/NZS 4360:1995 was among the first national risk management standards published anywhere and directly shaped ISO 31000 when the international standard was drafted. Practitioners who learned AS/NZS 4360 tend to find ISO 31000 familiar rather than foreign.
Do you need any experience to take ISO 31000 Foundation?
None. There is no prerequisite, no prior certification and no requirement to work in risk. Foundation is designed for general managers, project owners, board members, internal auditors and anyone who contributes to risk decisions without being a risk specialist — and passing makes you a PECB Certificate Holder in ISO 31000 Foundation with no experience attestation required.
That is different from the levels above it. Risk Manager and Lead Risk Manager can both be sat without experience too, but the credential you are awarded on passing depends on the professional experience you can attest to — without it you receive the Provisional tier.
Free risk management documents to study alongside the course
Foundation teaches the framework and the vocabulary. Seeing both applied to a real organisation is the fastest way to make them stick, so we publish the working documents in full and free — no email required.
- Calibrated 5×5 risk matrix (CSV) or PDF — likelihood and consequence scales with actual frequency bands and thresholds instead of adjectives. Read this one first: it shows why “Possible” and “Major” are useless until somebody defines them.
- Enterprise risk register (CSV) or PDF — twelve worked risks across strategy, operations, compliance, people, technology and governance, scored inherent and residual.
- Risk criteria and appetite statement (CSV) or PDF — what Clause 6.3.4 actually asks for, written as escalation thresholds rather than a paragraph of intent.
- AS ISO 31000 mapped to Australian obligations (CSV) or PDF — APRA CPS 220, CPS 230 and CPS 234, the SOCI Act, the PSPF, Comcover, ASX Principle 7, WHS and the Privacy Act, each mapped to the clause that does the work.