Own the risk framework and report risk posture to an executive or board. Self-paced PECB Lead Risk Manager training at $979 + GST, with the official exam voucher and one free resit included — online across Australia.
Available Australia-wide, in New Zealand and across Asia Pacific — and, because self-study and eLearning are delivered online through the myPECB platform, from anywhere in the world. Live online classes run in Australian time zones; in-person classroom delivery in Melbourne and Sydney is available on request. Base prices are published in AUD, and every course page supports available local currencies including NZD. An Australian billing address adds 10% GST; a non-Australian billing address has no Australian GST.
The PECB ISO 31000 Lead Risk Manager training course costs $979 + GST through Aegentra Academy, an official PECB authorised training partner in Australia. That price includes the official PECB examination voucher, the full course materials, 12 months of myPECB access, and one free exam resit within 12 months.
Online classes are arranged through the Aegentra Academy team for individual learners and groups.
Contact us for online classLearn · Practise · Implement
Aegentra combines official PECB training with free exam-preparation resources, practical ISO 31000 implementation tools and optional full exam practice through Aegentra Labs.
Learn
Included with courseThis is what the $979 + GST Self-Study price covers.
Choose your coursePractise
Free + optional paidTry before you buy
Want more practice?
$89 + GST for Academy learners
Regular price: $99 + GST · Save $10
Aegentra Labs is independently authored supplementary exam preparation. It is not official PECB course content and does not guarantee an examination result.
Implement
Free · No email requiredGo beyond passing the exam. Practical resources built around the work itself — the documents you will actually have to produce.
Explore free ISO 31000 resources$979 + GST, including the official PECB examination voucher, two attempts (the initial sit plus one free resit within 12 months) and 12 months of myPECB access. Typical effort is 35–45 hours of self-paced study over five to seven weeks, and the course carries 31 CPD credits — the highest of the three ISO 31000 levels.
| Course | What it qualifies you to do | Exam | Price (+ GST) |
|---|---|---|---|
| Foundation | Understand the standard — the eight principles, the framework and the risk process | 40 questions, closed book | $379 + GST |
| Risk Manager | Run risk in a function or business unit — assessment, criteria, treatment and reporting | 60 questions, open book | $594 + GST |
| Lead Risk Manager | Design and chair an enterprise risk programme — governance, appetite, KRIs and board reporting | 80 questions, open book | $979 + GST |
80 multiple-choice questions across 5 competency domains, open book, 70% to pass. The five domains are:
That is twenty more questions and two more domains than Risk Manager, and the extra ground is where the seniority sits: domains 4 and 5 cover the reporting, monitoring and consultation duties that a head of risk owns and a business-unit risk manager generally does not.
Open book means a hard copy of ISO 31000, the course materials and your own notes are permitted. As with every PECB ISO 31000 exam, questions carry three options with one correct answer and mix stand-alone with scenario-based items.
These figures come from PECB’s published candidate handbook for the ISO 31000 Lead Risk Manager examination. As at the Risk Manager level, the handbook publishes no exam duration, so none is asserted here. Question count, domain split, materials policy and pass mark are all stated — duration simply is not.
The deciding question is not how much risk experience you have. It is whose risk you are accountable for.
Take Risk Manager if you run risk inside a function, business unit or project — you are identifying, assessing and treating risk within a framework somebody else designed. Three competency domains, 60 questions, $594 + GST reduced from $849.
Take Lead Risk Manager if you are accountable for the framework itself — designing it, setting appetite, chairing the risk committee, reporting to a board and answering for whether the whole thing works. Five domains, 80 questions, $979 + GST.
There is also a credential ceiling to weigh. The Risk Manager exam awards Provisional Risk Manager or Risk Manager and stops there. Only the Lead Risk Manager exam carries the full ladder — Provisional Risk Manager, Risk Manager, Lead Risk Manager (five years of professional experience, two in risk management, 300 hours) and Senior Lead Risk Manager (ten years, seven in risk management, 1,000 hours). If a CRO or head-of-risk track is the destination, this is the exam that reaches it. The $130 difference between the two courses is small against sitting the wrong one.
Four things, and they map directly onto the two extra exam domains.
Sets risk appetite rather than applying it. Clause 6.3.4 asks for risk criteria defined before assessment. Most organisations skip it, which leaves “acceptable” to be argued case by case after the fact. Turning appetite into escalation thresholds a manager can actually apply is lead-level work.
Builds reporting a board can act on. The most common failure in Australian risk reporting is a heat map with no trend and no appetite context — it shows where risks sit but not whether that is acceptable or which way it is moving. Replacing it with appetite-versus-actual trending and named key risk indicators with thresholds is what makes oversight real.
Owns risk culture and consultation. Domain 5 covers communication and consultation as a duty rather than a courtesy. A framework nobody outside the risk team understands does not change behaviour.
Integrates rather than parallels. Enterprise risk has to connect to the ISO 27001 ISMS, to business continuity under ISO 22301, and to the AI governance work under ISO 42001 — one register and one appetite, not four that contradict each other.
Public sector and critical infrastructure risk roles are where this credential earns its keep, because the obligations are explicit and the assessor is a regulator.
The PSPF requires non-corporate Commonwealth entities to manage security risk using a risk management approach, with the Accountable Authority attesting annually to security maturity — an attestation is only as defensible as the method behind it. The Commonwealth Risk Management Policy under the PGPA Act requires appropriate systems of risk oversight and internal control, and Comcover benchmarks risk maturity annually across insured entities, which rewards a framework producing comparable year-on-year evidence.
The SOCI Act requires responsible entities across the designated critical infrastructure sectors to maintain a written Risk Management Program covering all hazards — cyber, personnel, supply chain and physical — with annual reporting to the board and the regulator. An all-hazards program is exactly what Clause 5.4 describes, and it is the reason ISO 31000 rather than a cyber-only framework is the right umbrella.
Certifying yourself and certifying an organisation are different questions: the ISO 31000 certification guide for Australia covers the organisational side, and Aegentra’s governance and risk practice does the work itself.
Lead Risk Manager is about the framework, not just the process. These are the four artefacts that framework produces — published in full, free, no email required.
The official PECB course and exam package starts at $979 + GST — with no separate exam fee after enrolment. Optional Aegentra Labs exam preparation is clearly priced separately.
The exam voucher is included in your enrolment, and so is one free resit if you don't pass first time. Both the exam and the credential are issued directly by PECB.
This exam carries the full PECB ladder: Provisional Risk Manager (no experience) → Risk Manager (2 years, 1 in risk management, 200 hours) → Lead Risk Manager (5 years, 2 in risk management, 300 hours) → Senior Lead Risk Manager (10 years, 7 in risk management, 1,000 hours). All tiers require signing the PECB Code of Ethics and are maintained through continuing professional development (CPD) credits.
Official training + independent exam preparation
Aegentra Academy provides the official PECB course, learning materials and examination pathway. Aegentra Labs is the separate practice workspace for a sourced exam guide, original PECB-style questions, timed exam mode, answer review and domain-level results for this exact qualification.
Labs practice is supplementary, independently authored and not official PECB course content or an examination guarantee.
/ Before you enrol
These answers use this course's current catalogue record and PECB's published exam, certification, and maintenance policies.
The published price is A$979 for Self-Study, before tax. It includes the official PECB course materials, 12 months of access, the first exam attempt, one free retake, and the certification application fee. PECB’s partner-course policy also includes the first year of the Annual Maintenance Fee where maintenance applies; Foundation and Provisional credentials are maintenance-exempt. There is no separate first-exam or certification-application charge after enrolment.
PECB’s current maintenance policy lists no maintenance fee for Foundation, Provisional, or Transition credentials. For all other PECB certifications, the published fee is $390 per three-year certification cycle, together with the applicable CPD requirements and continued adherence to the PECB Code of Ethics. PECB sets this fee and may change it, so check the linked policy before renewal.
Yes. Every Academy course supports AUD and multiple local currencies, including NZD, USD, SGD, GBP, EUR, INR, AED, MYR, PHP, IDR, and VND when a live quote is available. Currency and tax are separate: an Australian billing address adds 10% GST, while a non-Australian billing address has no Australian GST. For example, an Australian working in New Zealand may pay in NZD and use an Australian billing address, but 10% GST will still be added because the billing address is Australian.
The currently published self-paced option is Self-Study at A$979 before tax, using the official PECB slide-based materials. A separate recorded eLearning price is not currently published for this course. The official exam package is still included, and instructor-led delivery is available only when a confirmed cohort is shown or arranged with Aegentra Academy.
Yes. PECB publishes remote online exam sessions that candidates can take from home or another suitable location through the PECB Exams application. The published course record lists these exam facts: duration — Timed exam, sat online under remote proctoring; format — Open-book, multiple-choice — stand-alone and scenario-based questions; assessment — 80 multiple-choice questions across 5 competency domains — fundamental principles and concepts of risk management, establishment of the risk management framework, initiation of the risk management process and risk assessment, risk treatment and risk recording and reporting, and risk monitoring, review, communication and consultation.; pass mark — 70%; language — English (other PECB languages available on request). New Zealand candidates should choose a published session that suits their local time, meet PECB’s identity and technical requirements, and complete the system check before exam day. PECB’s general exam policy does not publish a New Zealand restriction.
This exam carries the full PECB ladder: Provisional Risk Manager (no experience) → Risk Manager (2 years, 1 in risk management, 200 hours) → Lead Risk Manager (5 years, 2 in risk management, 300 hours) → Senior Lead Risk Manager (10 years, 7 in risk management, 1,000 hours). All tiers require signing the PECB Code of Ethics and are maintained through continuing professional development (CPD) credits. Passing the exam does not by itself guarantee the highest experience-based credential tier. PECB requires an online certification application and reference contact details, and its Certification Department decides whether the education, professional experience, and risk-management activity requirements are met.
PECB’s public certification-process page does not publish a closed list of documents that automatically proves project hours. It requires the online application and contact details for references who may be contacted to validate your experience. Keep a dated activity log showing the organisation or client, your role, the risk-management activity, dates, responsibilities, and hours; retain employer or client confirmations, statements of work, timesheets, or similar records in case PECB asks for support. The PECB Certification Department assesses the application and makes the final decision.
6 modules, fully on-demand. Click any module to see the topics inside.
PECB credentials stack — Foundation establishes the language, Lead Implementer builds the system, Lead Auditor verifies it. Pick the level that matches the work you will actually be doing.
Entry-level pathway to ISO 31000:2018 — risk principles, framework, and process.
8–12 hours · self-paced
Risk management framework, process, and integration across the business.
25–35 hours · self-paced
Lead an enterprise risk program end to end — design, deploy, and chair the framework.
35–45 hours · self-paced
PECB ISO 31000 Lead Risk Manager is the certification a hiring manager looks for when the role is Chief Risk Officer, Head of Risk, or senior risk consultant leading an enterprise-wide risk programme. It is the difference between someone who can run a risk process inside a function and a credentialled senior practitioner who can design and lead the entire enterprise risk framework — board reporting, risk appetite statements, integrated assurance with internal audit, and cross-domain risk treatment.
Chief Risk Officer, Head of Enterprise Risk, Head of Operational Risk, Group Risk Manager, Senior Risk Consultant, Risk Programme Director — every one of these senior roles in the Australian market either requires Lead Risk Manager or treats it as a strong substitute for years of equivalent experience. APRA-regulated entities, ASX-listed companies, federal and state government, and large mining / energy / critical-infrastructure operators all expect it at the senior risk-leadership level.
Lead Risk Manager trains the skill of designing and operating an enterprise-wide risk framework — which underpins ISO 27001 (information-security risk), ISO 22301 (business continuity), ISO 42001 (AI risk), and the integrated GRC programmes typical of regulated Australian organisations. Practitioners who hold Lead Risk Manager alongside an information-security credential are routinely candidates for integrated CRO / vCISO roles.
For senior Australian risk-advisory engagements (enterprise-risk transformation, integrated risk-framework reviews, board risk-appetite work), procurement asks "are your senior consultants PECB Lead Risk Manager certified?". The credential is what unlocks billable-day rates in the $2,000-$3,500 AUD range for senior risk consulting work.
Banks, mutuals, insurers, and superannuation funds operating under APRA CPS 220 staff their CRO and senior risk leadership with credentialled practitioners. Lead Risk Manager is the dominant credential at the second-line leadership level — particularly important after CPS 230 commencement raised the bar for operational-risk capability.
ASX-listed entities use senior risk leadership to feed board risk committees with assurance, reporting, and strategic risk advice. Lead Risk Manager is the credential most commonly held by Heads of Risk and senior risk staff supporting board engagement.
Senior risk leadership in Commonwealth agencies and large state government departments operates under Comcover and state-equivalent frameworks. Lead Risk Manager is the credential expected for chief audit executives, heads of risk, and senior risk consultants engaged by agencies for transformation work.
Operators captured by the SOCI Act run integrated cross-hazard risk programmes spanning cyber, physical, personnel, supply-chain, and natural-hazard domains. Lead Risk Manager is the credential held by the senior practitioners designing and leading those integrated programmes — typically as Head of Group Risk or Director of Enterprise Risk.
The exam is open-book, but the questions reward fluency, not lookup. Plan your study around these checkpoints.
Free learning resources
Use Aegentra’s existing templates, checklists, registers and mappings alongside your course. No account or email is required.
Free companion reading for anyone studying or applying ISO 31000:2018, the international risk management standard:
Compare the family
The ISO 31000 family page compares current levels, prices, delivery, audiences and exam facts before you choose a pathway.
Compare ISO 31000 pathwaysSource and review status
Price, delivery and course content are generated from Aegentra’s authoritative catalogue record. The official PECB course page and exam policy are linked directly below. Source-link checks and substantive human review are tracked separately so one is never presented as the other.
Official PECB sources
Editorial accountability
Harry Sidhu owns publication of this record. A separate course-specific substantive reviewer has not yet been recorded.
Substantive review status
Official source links are checked separately. A course-specific substantive review date will be published when completed.
Yes. PECB certifications are internationally accredited and are accepted on Australian resumes, tender responses and procurement panels. Australia has no separate national licence for ISO 31000 Lead Risk Manager — the recognition comes from the accreditation behind the credential, which is international.
PECB’s professional certifications are accredited under ISO/IEC 17024 — the international standard for bodies certifying persons — by IAS, UKAS, KAB and COFRAC. Its Foundation certificate programs are separately accredited by ANAB (ANSI National Accreditation Board) under ANSI/ASTM E2659.
Aegentra Academy is an official PECB authorised training partner in Australia, which is what allows this course to include the official PECB examination voucher rather than billing it separately. You can confirm that directly with PECB through the official PECB partner directory.
This official PECB course is sold and supported by Aegentra Academy. PECB supplies the course material, examination and professional credential scheme. Aegentra's wider practice also runs governance, risk and compliance engagements and Microsoft 365 hardening for Australian organisations. Named eLearning trainers are credited separately on this page when the course record supplies them.
Courses run online and self-paced through the myPECB platform, so professionals across Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra and New Zealand enrol online. Instructor-led cohorts and in-person delivery in Melbourne and Sydney are available on request. Multi-seat team pricing is available for five or more seats — email Academy@aegentra.com.au for an enterprise quote. Tax invoices with GST and ABN are issued automatically at checkout.
It is the right tier if you own the framework rather than the register — defining the risk method, setting risk criteria, and reporting risk posture to an executive or board. Below that level, Risk Manager is the better value. Lead Risk Manager carries 31 CPD credits, is accredited under ISO/IEC 17024 by UKAS, IAS and COFRAC, and suits heads of risk, senior GRC consultants and anyone answering for an enterprise risk programme. As with every ISO 31000 credential, it certifies the practitioner — organisations cannot be certified against ISO 31000.
The PECB ISO 31000 Lead Risk Manager course costs $979 + GST through Aegentra Academy, with the official PECB examination voucher included — no separate exam fee. The price covers the course materials, 12 months of myPECB access, and one free resit within 12 months. The exam is open-book and remotely proctored from anywhere in Australia.
Six modules covering enterprise-wide risk framework design, risk-appetite and risk-tolerance setting, integrated risk treatment across business processes, complex risk-treatment decision-making, board-level risk reporting, and the integration of ISO 31000 with adjacent standards (ISO 27001, ISO 22301, ISO 42001). Total effort is 35-45 hours of self-paced study.
Recommended but not required. If you have substantial enterprise-risk leadership experience already — running a function, leading transformations, advising boards — you can go straight to Lead Risk Manager. If your background is operational-risk practitioner level, Risk Manager first is the better total path.
80 multiple-choice questions across five competency domains — fundamental principles and concepts of risk management, establishment of the risk management framework, initiation of the risk management process and risk assessment, risk treatment and risk recording and reporting, and risk monitoring, review, communication and consultation. It is open-book: a hard copy of ISO 31000, the course materials and your own notes are permitted. Pass mark is 70%. PECB does not publish a duration for this exam in its candidate handbook. The credential awarded depends on attested experience — Lead Risk Manager (5 years, 2 in risk management, 300 hours), Senior Lead Risk Manager (10 years, 7 in risk management, 1,000 hours).
Lead Risk Manager is the credential; CRO is the role. The credential demonstrates competency to lead enterprise-wide risk programmes; the role is the executive position that uses that competency. Most CROs in APRA-regulated entities and ASX-listed companies hold Lead Risk Manager or equivalent (e.g. IRM, FRM, GARP credentials).
Every authorised PECB Lead Risk Manager course leads to the same credential — the certificate is identical wherever you buy it. The differences are price, format, and who supports you. Aegentra delivers Lead Risk Manager at $979 + GST self-paced, including the exam voucher and one free resit. Aegentra is also an active Australian governance and risk consultancy.
Yes. The credential is specifically aimed at senior practitioners designing and leading enterprise-wide risk frameworks. CPS 220 and CPS 230 transformations are exactly that kind of programme. Lead Risk Manager is the standard credential for the senior risk lead, internal consultant, or external advisor running those transformations.
PECB Lead Risk Manager is recognised by Big-Four consultancies, the Institute of Risk Management (IRM), RIMS Australasia, IIA Australia, and most other professional risk bodies. CPD credits transfer on submission.
Typical effort is 35-45 hours of self-paced study spread over five to seven weeks. You have 12 months of myPECB access so the pace is yours.
PECB awards 31 CPD credits on completion of the ISO 31000 Lead Risk Manager course. These count toward CPD requirements at RIMS Australasia, IIA Australia, ISACA, IRM, and other professional bodies on submission.
Yes. Lead Risk Manager is the standard credential for senior independent risk consultants in Australia. The credential, combined with attested senior experience, is what consulting buyers ask for at the enterprise-risk-leadership engagement level.
Yes. Either complete checkout yourself and forward the Stripe tax invoice for reimbursement, or write to Academy@aegentra.com.au and we will issue an invoice direct to your organisation with payment terms. Groups of five or more receive a discount.
Immediately after payment. The Academy team confirms your seat with PECB and you receive login details by email — usually within one business day.
You have 12 months of access from enrolment. That window covers the course material, the official PECB exam, and one free resit if you need it.
One PECB-issued resit is included in your enrolment at no extra cost. Aegentra does not publish a pass-rate claim without an audited cohort dataset.
Questions about invoicing, GST, group bookings, refunds or instructor-led delivery? Read the Academy FAQ.