Skip to main content
PECB · 31000Foundation

PECB ISO 31000 Foundation Course & Exam Australia

Learn the ISO 31000:2018 risk management principles, framework and process from the ground up. Self-paced PECB risk management training from $379 + GST, with the official exam voucher and one free resit included — delivered online across Australia.

Available Australia-wide, in New Zealand and across Asia Pacific — and, because self-study and eLearning are delivered online through the myPECB platform, from anywhere in the world. Live online classes run in Australian time zones; in-person classroom delivery in Melbourne and Sydney is available on request. Base prices are published in AUD, and every course page supports available local currencies including NZD. An Australian billing address adds 10% GST; a non-Australian billing address has no Australian GST.

The PECB ISO 31000 Foundation training course costs $379 + GST through Aegentra Academy, an official PECB authorised training partner in Australia. That price includes the official PECB examination voucher, the full course materials, 12 months of myPECB access, and one free exam resit within 12 months.

Official course provider
PECB
Edition recorded in catalogue
ISO 31000:2018
Self-Study
12 months access
Initial attempt and one free retake
2 exam attempts included
/ Purchase order

ISO 31000 Foundation course price and enrolment options

Live online class

Online classes are arranged through the Aegentra Academy team for individual learners and groups.

Contact us for online class

Learn · Practise · Implement

More than the course: learn, practise and implement

Aegentra combines official PECB training with free exam-preparation resources, practical ISO 31000 implementation tools and optional full exam practice through Aegentra Labs.

Learn

Included with course

Official PECB training + exam

  • Official PECB ISO 31000 Foundation training
  • Official PECB examination voucher
  • Initial exam attempt plus one free resit
  • 12 months myPECB access
  • Official course materials
  • PECB credential application pathway

This is what the $379 + GST Self-Study price covers.

Choose your course

Practise

Free + optional paid

Prepare with Aegentra Labs

Free

Try before you buy

  • 5 free ISO 31000 Foundation practice questions
  • Answer explanations
  • Why the alternative answers are incorrect
  • Sourced ISO 31000 Foundation exam guide
  • Exam format and competency-domain guidance
  • No paid Labs access required
Optional

Want more practice?

$89 + GST for Academy learners

Regular price: $99 + GST · Save $10

  • Full question bank
  • Casual practice mode
  • Timed exam simulation
  • Detailed answer explanations
  • Saved results
  • Domain-level performance feedback
  • 12 months access
  • One payment, no automatic renewal
Add full Labs access — $89

Aegentra Labs is independently authored supplementary exam preparation. It is not official PECB course content and does not guarantee an examination result.

Implement

Free · No email required

Free ISO 31000 practitioner resources

Go beyond passing the exam. Practical resources built around the work itself — the documents you will actually have to produce.

Explore free ISO 31000 resources

How much does the ISO 31000 Foundation course cost in Australia?

$379 + GST, and that is the whole cost. The official PECB examination voucher is included, so there is no separate exam fee later, and you get two attempts — the initial sit plus one free resit within 12 months — along with 12 months of myPECB access. Typical effort is 8–12 hours of self-paced study, and the course carries 14 CPD credits.

Aegentra Academy is an official PECB authorised training partner, and prices are quoted in Australian dollars ex-GST, with a tax invoice showing GST and ABN issued at checkout.

CourseWhat it qualifies you to doExamPrice (+ GST)
FoundationUnderstand the standard — the eight principles, the framework and the risk process40 questions, closed book$379 + GST
Risk ManagerRun risk in a function or business unit — assessment, criteria, treatment and reporting60 questions, open book$594 + GST $849
Lead Risk ManagerDesign and chair an enterprise risk programme — governance, appetite, KRIs and board reporting80 questions, open book$979 + GST

Can an organisation be ISO 31000 certified?

No — and this is the single most important thing to understand before you buy anything. ISO 31000 is guidance, not a certifiable management system standard. There is no Stage 1 / Stage 2 audit, no certification body issues an ISO 31000 certificate to a company, and no organisation is “ISO 31000 certified”. Any vendor offering organisational ISO 31000 certification is selling something that does not formally exist.

What does exist is individual certification. PECB certifies people — Foundation, Risk Manager and Lead Risk Manager — and those are the credentials Australian tender panels and hiring managers actually ask for. Foundation certifies you, not your employer.

The reason ISO 31000 works this way is deliberate. ISO wrote it to apply to any organisation of any size in any sector, and to stay that universal it avoids prescriptive “shall” requirements. Without them there is nothing concrete for an auditor to raise a nonconformity against. If you need a certifiable risk-adjacent standard, that is ISO/IEC 27001 for information security — see the ISO 27001 Foundation course. If you are researching what risk certification costs an organisation in Australia, the ISO 31000 certification guide for Australia sets out the whole picture, including why the organisational side of the question has no price.

What is on the ISO 31000 Foundation exam?

40 multiple-choice questions across 2 competency domains, closed book, 70% to pass. The domains are fundamental principles and concepts of risk management, and the risk management framework and process. Each question has three options with one correct answer, mixing stand-alone questions with scenario-based ones that share a short case.

Foundation is the only ISO 31000 level sat closed book. No reference material is permitted — not the standard, not your course notes. Risk Manager and Lead Risk Manager are both open book. That single difference should shape how you study: at Foundation you are being tested on recall of the vocabulary and the shape of the framework, so ISO Guide 73 terminology needs to be genuinely memorised rather than looked up.

These figures come from PECB’s published candidate handbook for the ISO 31000 Foundation examination, not from another scheme’s specification. One thing the handbook does not give is a duration, so none is quoted here — the only times it mentions are the 30-minute arrival window and the extra allowance for non-native speakers.

Is ISO 31000 the same as AS ISO 31000?

Yes. In Australia the standard is published by Standards Australia as AS ISO 31000:2018, an identical adoption of ISO 31000:2018 — same eight principles, same framework, same process. If a position description, tender or internal policy asks for AS ISO 31000, PECB ISO 31000 training covers it.

One detail trips people up. The previous edition was AS/NZS ISO 31000:2009, a joint Australian and New Zealand standard. For the 2018 revision it was published as an Australian Standard rather than a joint one, so the “/NZS” was dropped. A document still citing AS/NZS ISO 31000 as current is referring to a superseded edition — worth knowing if you are reviewing an old risk policy.

Australia has unusual standing here: AS/NZS 4360:1995 was among the first national risk management standards published anywhere and directly shaped ISO 31000 when the international standard was drafted. Practitioners who learned AS/NZS 4360 tend to find ISO 31000 familiar rather than foreign.

Do you need any experience to take ISO 31000 Foundation?

None. There is no prerequisite, no prior certification and no requirement to work in risk. Foundation is designed for general managers, project owners, board members, internal auditors and anyone who contributes to risk decisions without being a risk specialist — and passing makes you a PECB Certificate Holder in ISO 31000 Foundation with no experience attestation required.

That is different from the levels above it. Risk Manager and Lead Risk Manager can both be sat without experience too, but the credential you are awarded on passing depends on the professional experience you can attest to — without it you receive the Provisional tier.

Free risk management documents to study alongside the course

Foundation teaches the framework and the vocabulary. Seeing both applied to a real organisation is the fastest way to make them stick, so we publish the working documents in full and free — no email required.

/ What you get

What's included in the ISO 31000 Foundation course fee

The official PECB course and exam package starts at $379 + GST — with no separate exam fee after enrolment. Optional Aegentra Labs exam preparation is clearly priced separately.

Course materials
  • PECB ISO 31000 Foundation slide deck (digital)
  • 12 months access via myPECB
  • Module quizzes and practice questions
  • ISO 31000 principles and process quick-reference
Exam package
  • Official PECB Foundation exam voucher
  • Online proctored — sit from anywhere in Australia
  • Two exam attempts (initial + one free resit)
  • PECB digital certificate on pass
Practitioner extras
  • APRA CPS 220 + CPS 230 alignment reference (Australian context)
  • Comcover / Commonwealth Risk Management Policy notes
  • Aegentra Academy support inbox
  • Pathway discount toward Risk Manager
/ Exam requirements & credential

ISO 31000 Foundation exam format, duration and pass mark

The exam voucher is included in your enrolment, and so is one free resit if you don't pass first time. Both the exam and the credential are issued directly by PECB.

Format
Multiple-choice
Duration
Timed exam, sat online under remote proctoring
Questions
40 multiple-choice questions across 2 competency domains — fundamental principles and concepts of risk management, and the risk management framework and process. Each question has three options with one correct response.
Pass mark
70%
Language
English (other PECB languages available on request)
Credential experience requirements

On passing, you become a PECB Certificate Holder in ISO 31000 Foundation. No professional experience is required — Foundation is the entry-level PECB qualification and the starting point before Risk Manager.

Official training + independent exam preparation

How can I prepare for the ISO 31000 Foundation exam after training?

Aegentra Academy provides the official PECB course, learning materials and examination pathway. Aegentra Labs is the separate practice workspace for a sourced exam guide, original PECB-style questions, timed exam mode, answer review and domain-level results for this exact qualification.

Labs practice is supplementary, independently authored and not official PECB course content or an examination guarantee.

/ Before you enrol

Clear answers about price, tax, exams, and certification.

These answers use this course's current catalogue record and PECB's published exam, certification, and maintenance policies.

What is included in the ISO 31000 Foundation course fee?

The published price is A$379 for Self-Study, before tax. It includes the official PECB course materials, 12 months of access, the first exam attempt, one free retake, and the certification application fee. PECB’s partner-course policy also includes the first year of the Annual Maintenance Fee where maintenance applies; Foundation and Provisional credentials are maintenance-exempt. There is no separate first-exam or certification-application charge after enrolment.

What will PECB charge to maintain the ISO 31000 Foundation credential?

No ongoing PECB maintenance fee or CPD submission is required for a Foundation credential. PECB’s current maintenance policy lists Foundation, Provisional, and Transition credentials as maintenance-exempt.

Can I pay in NZD or another currency, and when is Australian GST added?

Yes. Every Academy course supports AUD and multiple local currencies, including NZD, USD, SGD, GBP, EUR, INR, AED, MYR, PHP, IDR, and VND when a live quote is available. Currency and tax are separate: an Australian billing address adds 10% GST, while a non-Australian billing address has no Australian GST. For example, an Australian working in New Zealand may pay in NZD and use an Australian billing address, but 10% GST will still be added because the billing address is Australian.

What is the difference between Self-Study and eLearning for ISO 31000 Foundation?

The currently published self-paced option is Self-Study at A$379 before tax, using the official PECB slide-based materials. A separate recorded eLearning price is not currently published for this course. The official exam package is still included, and instructor-led delivery is available only when a confirmed cohort is shown or arranged with Aegentra Academy.

Can I sit the ISO 31000 Foundation exam remotely from New Zealand or another time zone?

Yes. PECB publishes remote online exam sessions that candidates can take from home or another suitable location through the PECB Exams application. The published course record lists these exam facts: duration — Timed exam, sat online under remote proctoring; format — Multiple-choice; assessment — 40 multiple-choice questions across 2 competency domains — fundamental principles and concepts of risk management, and the risk management framework and process. Each question has three options with one correct response.; pass mark — 70%; language — English (other PECB languages available on request). New Zealand candidates should choose a published session that suits their local time, meet PECB’s identity and technical requirements, and complete the system check before exam day. PECB’s general exam policy does not publish a New Zealand restriction.

Which credential tier will I receive after the ISO 31000 Foundation exam, and who assesses it?

On passing, you become a PECB Certificate Holder in ISO 31000 Foundation. No professional experience is required — Foundation is the entry-level PECB qualification and the starting point before Risk Manager. A Foundation certificate does not require professional experience or project hours. After you pass, PECB processes the applicable certificate requirements.

What evidence does PECB accept for the experience or project hours for ISO 31000 Foundation?

No project or audit hours are required for the Foundation credential, so there is no project-hour evidence to submit.

/ Training prerequisites

What you should know before starting ISO 31000 Foundation

  • None — Foundation is the entry-level pathway and assumes no prior risk or audit experience.
/ Who this course is for

Who should take the ISO 31000 Foundation course

  • New entrants to risk, governance, audit, or compliance roles
  • Operational managers who want a shared risk vocabulary with their risk team
  • Anyone preparing to step up to ISO 31000 Risk Manager or Lead Risk Manager
/ What you'll learn

By the end of this course you'll be able to:

  • Explain the purpose, scope, and benefits of ISO 31000:2018.
  • Apply the eight ISO 31000 risk management principles.
  • Describe the risk management framework and its lifecycle.
  • Walk through the risk management process — establishing context, identifying, analysing, evaluating, treating, monitoring, and reviewing risk.
  • Use ISO Guide 73 risk vocabulary consistently with auditors and the business.
/ Curriculum

What does the ISO 31000 Foundation course cover?

5 modules, fully on-demand. Click any module to see the topics inside.

01Introduction to risk management
  • What risk is and why ISO 31000 matters
  • History and structure of ISO 31000:2018
  • How ISO 31000 sits next to ISO 27005 and COSO ERM
  • ISO Guide 73 risk vocabulary
02Principles of risk management
  • The eight ISO 31000 principles
  • Integrating risk into governance and decision-making
  • Customised, inclusive, dynamic risk practice
  • Continual improvement and human factors
03The risk management framework
  • Leadership and commitment
  • Designing the framework
  • Implementing, evaluating, and improving the framework
  • Roles, responsibilities, and accountabilities
04The risk management process
  • Communication, consultation, scope, context, and criteria
  • Risk identification techniques
  • Risk analysis and evaluation
  • Risk treatment, monitoring, and review
05Certification and exam prep
  • Risk culture and reporting basics
  • How ISO 31000 plugs into ISO 27001 risk treatment
  • Worked examples and mini-cases
  • Exam strategy and practice questions
/ Career signal

What is ISO 31000 Foundation certification worth?

A recognised risk credential, in under a month

PECB ISO 31000 Foundation tells a hiring manager you understand the international standard for enterprise risk management — the eight principles, the framework, and the risk process. It is the lowest-friction way to put an internationally recognised risk credential on a CV without taking weeks off work, and it sets the baseline for any operational risk, compliance, internal audit, or business-continuity role advertised in Australia.

Where it shows up in Australian job descriptions

Operational Risk Analyst, Risk and Compliance Officer, Internal Audit Analyst, Business Continuity Coordinator, Risk Reporting Analyst, GRC Analyst — every one of these roles in Australia treats ISO 31000 Foundation as a competitive credential. APRA-regulated financial services, ASX-listed companies, Commonwealth and state government risk functions, and mining / energy / critical-infrastructure operators all expect it as a minimum literacy bar.

The natural prerequisite for the Risk Manager pathway

Foundation is not a substitute for Risk Manager or Lead Risk Manager — it is the on-ramp. The principles, the framework structure, the relationship between risk appetite, risk tolerance, and risk treatment are assumed knowledge in every Aegentra Risk Manager course. Many Foundation alumni progress to Risk Manager within twelve months once they are assigned to a real enterprise-risk programme.

It pairs well with adjacent credentials

Foundation stacks cleanly with ISO 27001 (information-security risk), ISO 27005 (information-security risk management), ISO 22301 (business continuity), and ISO 9001 (quality, with risk-based thinking). For practitioners building a multi-standard credential portfolio, Foundation is the cheapest internationally recognised risk-methodology entry point.

/ Where this lands in Australia

ISO 31000 Foundation training in Australia — who hires it

APRA-regulated financial services

Banks, mutuals, insurers, and superannuation funds operating under APRA CPS 220 (risk management framework) and CPS 230 (operational risk management) need staff with documented risk-methodology fluency. Foundation is the minimum bar for the operational-risk analysts, second-line risk officers, and compliance staff participating in those frameworks.

ASX-listed companies under corporate governance

The ASX Corporate Governance Principles expect listed entities to maintain a sound risk-management framework. Foundation is the minimum credential for the risk-analyst staff feeding the framework with operational evidence, board reporting, and audit-committee data.

Commonwealth and state government risk functions

The Commonwealth Risk Management Policy, administered by Comcover, is explicitly aligned with ISO 31000. State equivalents (Victorian Government Risk Management Framework and similar) follow the same lines. Foundation is the minimum credential for risk analysts working in or with Commonwealth and state agencies.

Mining, energy, and SOCI-captured operators

Operators captured by the SOCI Act and broader resource-sector risk regimes need cross-hazard risk methodology fluency at the operational level. Foundation prepares operational and project-management staff to participate credibly in integrated risk reviews.

/ Study plan

How hard is the ISO 31000 Foundation exam?

The exam is closed-book, so plan for recall rather than lookup. Work through these checkpoints before you sit it.

  1. 01Read the ISO 31000:2018 standard end-to-end at least once. Focus on the eight principles and the risk-management process — these are the most-tested topics at Foundation level.
  2. 02Build a one-page diagram of the risk-management process (communication, scope, risk assessment, risk treatment, monitoring, review, recording) with arrows showing the iterative loops. The exam rewards candidates who can place a question precisely in the process.
  3. 03Memorise the difference between principles, framework, and process. The exam tests this distinction repeatedly — particularly the relationship between leadership commitment in the framework and the principles.
  4. 04Use the practice questions in myPECB to identify weak domains. Foundation covers two competency domains — your score gap on a sample exam tells you where to spend the last six hours of study.
  5. 05Book the exam for a quiet window 7-14 days after finishing the slides — long enough to consolidate, short enough that the material is fresh.

Free learning resources

Put the course concepts into practice.

Use Aegentra’s existing templates, checklists, registers and mappings alongside your course. No account or email is required.

Browse free ISO 31000 resources
/ Related reading

Related ISO 31000 resources

Free companion reading for anyone studying or applying ISO 31000:2018, the international risk management standard:

Compare the family

See where this course fits

The ISO 31000 family page compares current levels, prices, delivery, audiences and exam facts before you choose a pathway.

Compare ISO 31000 pathways

Source and review status

How these course facts are governed

Price, delivery and course content are generated from Aegentra’s authoritative catalogue record. The official PECB course page and exam policy are linked directly below. Source-link checks and substantive human review are tracked separately so one is never presented as the other.

Official PECB sources

Editorial accountability

Harry Sidhu owns publication of this record. A separate course-specific substantive reviewer has not yet been recorded.

Substantive review status

Official source links are checked separately. A course-specific substantive review date will be published when completed.

/ Accreditation

Is the ISO 31000 Foundation certification recognised in Australia?

Yes. PECB certifications are internationally accredited and are accepted on Australian resumes, tender responses and procurement panels. Australia has no separate national licence for ISO 31000 Foundation — the recognition comes from the accreditation behind the credential, which is international.

PECB’s Foundation certificate programs are accredited by ANAB (ANSI National Accreditation Board) under ANSI/ASTM E2659 — the standard for certificate programs. Its professional certifications are separately accredited under ISO/IEC 17024, the international standard for bodies certifying persons, by IAS, UKAS, KAB and COFRAC.

Aegentra Academy is an official PECB authorised training partner in Australia, which is what allows this course to include the official PECB examination voucher rather than billing it separately. You can confirm that directly with PECB through the official PECB partner directory.

This official PECB course is sold and supported by Aegentra Academy. PECB supplies the course material, examination and professional credential scheme. Aegentra's wider practice also runs governance, risk and compliance engagements and Microsoft 365 hardening for Australian organisations. Named eLearning trainers are credited separately on this page when the course record supplies them.

Courses run online and self-paced through the myPECB platform, so professionals across Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra and New Zealand enrol online. Instructor-led cohorts and in-person delivery in Melbourne and Sydney are available on request. Multi-seat team pricing is available for five or more seats — email Academy@aegentra.com.au for an enterprise quote. Tax invoices with GST and ABN are issued automatically at checkout.

/ Frequently asked

ISO 31000 Foundation — frequently asked.

Is ISO 31000 certification worth it?

It is worth it if you own or contribute to risk decisions and need a recognised vocabulary for them. ISO 31000 is guidance rather than a certifiable management system, so organisations are never "ISO 31000 certified" — only individuals hold the credential. The value is practical: PECB ISO 31000 credentials are accredited by UKAS, IAS and COFRAC under ISO/IEC 17024, they are recognised on Australian tender responses and GRC hiring panels, and Foundation carries 14 CPD credits toward maintaining other certifications. At $379 + GST with the exam voucher and a free resit included, the cost to test that value is low.

What is the cost of the ISO 31000 exam?

There is no separate exam fee at Aegentra Academy — the official PECB examination voucher is included in the course price. ISO 31000 Foundation is $379 + GST, Risk Manager is $594 + GST reduced from $849, and Lead Risk Manager is $979 + GST, each including the voucher, 12 months of myPECB access, and one free resit within 12 months. Always confirm this before buying elsewhere: several Australian providers quote a course fee and bill the examination separately.

What does the PECB ISO 31000 Foundation course cover?

Five modules covering the structure of ISO 31000:2018, the eight risk principles, the framework for risk management (leadership and commitment, integration, design, implementation, evaluation, improvement), the risk-management process (scope and context, risk assessment, risk treatment, monitoring), and exam preparation. Total effort is 8-12 hours of self-paced study.

Is the PECB ISO 31000 Foundation recognised in Australia?

Yes. PECB is accredited by UKAS, IAS and COFRAC under ISO/IEC 17024 for personnel certification — the same accreditation framework JAS-ANZ uses in Australia. The credential is recognised by Australian Commonwealth and state government tenders, APRA-regulated financial-services hiring, ASX-listed entities, and certification bodies operating in Australia.

Can my organisation be ISO 31000 certified?

No. ISO 31000 is guidance, not a certifiable management system standard. There is no Stage 1 / Stage 2 audit and no organisational ISO 31000 certificate. Individuals can be certified under ISO 31000 through PECB (Foundation, Risk Manager, Lead Risk Manager). What this Foundation course gives you is the individual credential, not an organisational certificate.

How does ISO 31000 relate to ISO 27001?

ISO 27001 requires a documented risk-assessment methodology but does not mandate which one. ISO 31000 (or its companion ISO/IEC 27005, more specific to information-security risk) is the most common methodology imported into ISO 27001 implementations. Foundation gives you the methodology vocabulary that ISO 27001 implementations assume.

How is the Foundation exam structured?

Multiple-choice and closed-book, sat online under remote proctoring: 40 questions across two competency domains — fundamental principles and concepts of risk management, and the risk management framework and process. Each question has three options with one correct answer. Pass mark is 70%. PECB does not publish an exam duration for ISO 31000 Foundation in its candidate handbook, so treat any quoted figure as unsourced. You receive your PECB digital certificate within a few business days of passing.

What makes the Aegentra Foundation course different?

Every authorised PECB Foundation course leads to the same credential — the certificate is identical wherever you buy it. The differences are price, format, and who supports you. Aegentra delivers Foundation at $379 + GST with the exam, one free resit, and 12 months access included. Aegentra is also an active Australian governance and risk consultancy, so Academy support is informed by current practice.

Does ISO 31000 satisfy APRA CPS 230 or CPS 220?

Indirectly. APRA CPS 230 (operational risk) and CPS 220 (risk management framework) impose specific obligations on APRA-regulated entities. ISO 31000 provides the risk-management methodology that satisfies the methodological expectations of both, but compliance with each prudential standard is what APRA audits. Foundation gives you the methodology fluency to participate credibly in CPS 220/230 frameworks.

Is ISO 31000 aligned with the Commonwealth Risk Management Policy?

Yes. The Commonwealth Risk Management Policy, administered by Comcover, is explicitly aligned with ISO 31000. The policy references the standard as the international baseline for Commonwealth risk practice. Foundation is the minimum credential for risk staff working with Commonwealth agencies.

What CPD credits do I earn?

PECB awards 14 CPD credits on completion of the ISO 31000 Foundation course. These count toward CPD requirements at ISACA, RIMS Australasia, IIA Australia, and other professional bodies on submission.

How long is the Foundation certificate valid?

The Foundation credential does not expire and does not require renewal. The certificate is dated and refers to the ISO 31000:2018 edition; if the standard is significantly revised in future you may choose to take a refresher course.

Can my employer pay or reimburse?

Yes. Either complete checkout yourself and forward the Stripe tax invoice for reimbursement, or write to Academy@aegentra.com.au and we will issue an invoice direct to your organisation with payment terms. Groups of five or more receive a discount.

When can I start the course?

Immediately after payment. The Academy team confirms your seat with PECB and you receive login details by email — usually within one business day.

How long do I have access to the course?

You have 12 months of access from enrolment. That window covers the course material, the official PECB exam, and one free resit if you need it.

What if I fail the exam?

One PECB-issued resit is included in your enrolment at no extra cost. Aegentra does not publish a pass-rate claim without an audited cohort dataset.

Questions about invoicing, GST, group bookings, refunds or instructor-led delivery? Read the Academy FAQ.

$379AUD · EXCL. TAX