How much does the ISO 31000 Foundation course cost in Australia?
$379 + GST, and that is the whole cost. The official PECB examination voucher is included, so there is no separate exam fee later, and you get two attempts — the initial sit plus one free resit within 12 months — along with 12 months of myPECB access. Typical effort is 8–12 hours of self-paced study, and the course carries 14 CPD credits.
Aegentra Academy is an official PECB authorised training partner, and prices are quoted in Australian dollars ex-GST, with a tax invoice showing GST and ABN issued at checkout.
Can an organisation be ISO 31000 certified?
No. ISO 31000 is guidance, not a certifiable management system standard. There is no accredited Stage 1 / Stage 2 organisational certification route and no accredited organisational ISO 31000 certificate.
What does exist is individual certification. PECB offers individual Foundation, Risk Manager and Lead Risk Manager pathways. Foundation is a certificate-holder pathway, while the Risk Manager schemes are personnel credentials. None certifies the employer.
The reason ISO 31000 works this way is deliberate. ISO wrote it to apply to any organisation of any size in any sector, and to stay that universal it avoids prescriptive “shall” requirements. Without them there is nothing concrete for an auditor to raise a nonconformity against. If you need a certifiable risk-adjacent standard, that is ISO/IEC 27001 for information security — see the ISO 27001 Foundation course. If you are researching what risk certification costs an organisation in Australia, the ISO 31000 certification guide for Australia sets out the whole picture, including why the organisational side of the question has no price.
What is on the ISO 31000 Foundation exam?
40 multiple-choice questions across 2 competency domains, closed book, 70% to pass. The domains are fundamental principles and concepts of risk management, and the risk management framework and process. Each question has three options with one correct answer, mixing stand-alone questions with scenario-based ones that share a short case.
Foundation is the only ISO 31000 level sat closed book. No reference material is permitted — not the standard, not your course notes. Risk Manager and Lead Risk Manager are both open book. That single difference should shape how you study: at Foundation you are being tested on recall of the vocabulary and the shape of the framework, so ISO Guide 73 terminology needs to be genuinely memorised rather than looked up.
PECB’s current ISO 31000 Foundation Candidate Handbook publishes the 40-question format, while PECB’s current official course brochure publishes a one-hour exam duration.
Is ISO 31000 the same as AS ISO 31000?
Yes. In Australia the standard is published by Standards Australia as AS ISO 31000:2018, an identical adoption of ISO 31000:2018 — same eight principles, same framework, same process. If a position description, tender or internal policy asks for AS ISO 31000, PECB ISO 31000 training covers it.
One detail trips people up. The previous edition was AS/NZS ISO 31000:2009, a joint Australian and New Zealand standard. For the 2018 revision it was published as an Australian Standard rather than a joint one, so the “/NZS” was dropped. A document still citing AS/NZS ISO 31000 as current is referring to a superseded edition — worth knowing if you are reviewing an old risk policy.
Australia has unusual standing here: AS/NZS 4360:1995 was among the first national risk management standards published anywhere and directly shaped ISO 31000 when the international standard was drafted. The historical relationship helps explain why the terminology remains familiar in Australian risk practice.
Do you need any experience to take ISO 31000 Foundation?
None. There is no prerequisite, no prior certification and no requirement to work in risk. Foundation is designed for general managers, project owners, board members, internal auditors and anyone who contributes to risk decisions without being a risk specialist — and after passing you may apply for the PECB Certificate Holder in ISO 31000 Foundation pathway, subject to PECB’s application review and final decision.
That is different from the levels above it. Risk Manager and Lead Risk Manager can both be sat without experience too, but passing does not itself award a credential. You may apply for the tier supported by your verified professional experience; without sufficient experience, you may apply for the Provisional tier, and PECB reviews the application and makes the final decision.
Free risk management documents to study alongside the course
Foundation teaches the framework and the vocabulary. Seeing both applied to a worked organisation adds practical context, so we publish the working documents in full and free — no email required.
- Calibrated 5×5 risk matrix (CSV) or PDF — likelihood and consequence scales with actual frequency bands and thresholds instead of adjectives. Read this one first: it shows why “Possible” and “Major” are useless until somebody defines them.
- Enterprise risk register (CSV) or PDF — twelve worked risks across strategy, operations, compliance, people, technology and governance, scored inherent and residual.
- Risk criteria and appetite statement (CSV) or PDF — what Clause 6.3.4 actually asks for, written as escalation thresholds rather than a paragraph of intent.
- AS ISO 31000 mapped to Australian obligations (CSV) or PDF — APRA CPS 220, CPS 230 and CPS 234, the SOCI Act, the PSPF, Comcover, ASX Principle 7, WHS and the Privacy Act, each cross-referenced to a potentially relevant ISO 31000 clause and suggested evidence to consider.
The examples illustrate one possible implementation. Regulatory mappings are cross-references, not compliance determinations. The course develops knowledge assessed by PECB; role, engagement and regulatory eligibility depend on experience and the relevant organisation.