Build, implement and run a risk management framework to ISO 31000:2018. Self-paced PECB Risk Manager training from $594 + GST — reduced from $849 — with the official exam voucher and one free resit included, online across Australia, exam remotely proctored.
Available Australia-wide, in New Zealand and across Asia Pacific — and, because self-study and eLearning are delivered online through the myPECB platform, from anywhere in the world. Live online classes run in Australian time zones; in-person classroom delivery in Melbourne and Sydney is available on request. Base prices are published in AUD, and every course page supports available local currencies including NZD. An Australian billing address adds 10% GST; a non-Australian billing address has no Australian GST.
The PECB ISO 31000 Risk Manager training course costs $594 + GST through Aegentra Academy, an official PECB authorised training partner in Australia. That price includes the official PECB examination voucher, the full course materials, 12 months of myPECB access, and one free exam resit within 12 months. The eLearning format is $649 + GST.
Learn · Practise · Implement
Aegentra combines official PECB training with free exam-preparation resources, practical ISO 31000 implementation tools and optional full exam practice through Aegentra Labs.
Learn
Included with courseThis is what the $594 + GST Self-Study price covers, or $649 + GST with PECB eLearning.
Choose your coursePractise
Free + optional paidTry before you buy
Want more practice?
$89 + GST for Academy learners
Regular price: $99 + GST · Save $10
Aegentra Labs is independently authored supplementary exam preparation. It is not official PECB course content and does not guarantee an examination result.
Implement
Free · No email requiredGo beyond passing the exam. Practical resources built around the work itself — the documents you will actually have to produce.
Explore free ISO 31000 resources$594 + GST as self-paced study, or $649 + GST for the guided eLearning version with video lectures from PECB master trainers — reduced from $849 and $928 respectively. Both include the official PECB examination voucher, two attempts (the initial sit plus one free resit within 12 months), and 12 months of myPECB access. There is no separate exam fee.
Typical effort is 25–35 hours of self-paced study, usually spread over three to five weeks alongside a full-time job, and the course carries 21 CPD credits. PECB also supplies over 300 pages of course material.
| Course | What it qualifies you to do | Exam | Price (+ GST) |
|---|---|---|---|
| Foundation | Understand the standard — the eight principles, the framework and the risk process | 40 questions, closed book | $379 + GST |
| Risk Manager | Run risk in a function or business unit — assessment, criteria, treatment and reporting | 60 questions, open book | $594 + GST |
| Lead Risk Manager | Design and chair an enterprise risk programme — governance, appetite, KRIs and board reporting | 80 questions, open book | $979 + GST |
Compare carefully when you shop this course. Several Australian providers quote a course fee and bill the PECB examination separately, so the advertised figure is not the figure you pay. Ask two questions of any provider: is the exam voucher included, and is a resit included.
60 multiple-choice questions across 3 competency domains, open book, 70% to pass. The domains are fundamental principles and concepts of risk management, establishment of a risk management framework, and implementation of a risk management process. Questions carry three options with one correct answer, mixing stand-alone items with scenario-based ones where several questions hang off a single short case.
It is not an essay exam. That claim circulates widely and is worth correcting, because it changes how people prepare: candidates who expect to write long-form answers practise the wrong skill entirely. The handbook is unambiguous that this is a multiple-choice paper.
Being open book, you may bring a hard copy of ISO 31000, the course materials, and any personal notes you took during training. That makes speed of retrieval the real constraint rather than memorisation — candidates who fail usually knew the content but could not find it quickly enough. Build an index into your notes before you sit.
These figures come from PECB’s published candidate handbook for the ISO 31000 Risk Manager examination. Note what is absent: the handbook states no exam duration. Providers quoting two or three hours for this paper are citing something other than the handbook, which is worth knowing when you are comparing course pages.
This exam leads to two credentials, and it is worth being precise because the distinction is often blurred in course marketing:
This exam does not lead to Lead Risk Manager or Senior Lead Risk Manager. Those sit on a separate scheme and require the Lead Risk Manager exam, which covers five competency domains rather than three. If your target is a head-of-risk or CRO-track role, buy that one instead of buying this and discovering the ceiling later.
Most risk matrices fail for one reason: likelihood and consequence are left as adjectives. When “Possible” and “Major” mean whatever the person scoring them wants, two people assess the same risk and land three bands apart, and the heat map that reaches the board is noise presented as analysis.
A working 5×5 matrix calibrates every level. Likelihood becomes a frequency band — “about once in three years” rather than “possible”. Consequence becomes a threshold per consequence type, so a financial consequence has a dollar range, a safety consequence has an injury classification, and a regulatory consequence has a defined enforcement outcome. That is what makes scoring repeatable between assessors, and repeatability is the whole point of Clause 6.4.3.
The second thing most registers get wrong is stopping at the score. A register that records only numbers cannot tell a board whether anything needs to change. What makes it decision-useful is two more columns: how effective the current controls actually are, and whether the residual score sits inside appetite. We publish both worked out in full below.
No Australian law mandates ISO 31000, but several regimes require exactly what it produces. APRA CPS 220 requires regulated institutions to maintain a risk management framework and a board-approved risk appetite statement — Clause 5 gives you the framework structure and Clause 6.3.4 gives you appetite expressed as thresholds rather than intent. CPS 230 requires identification of critical operations with tolerance levels for disruption, and management of service provider risk, which is Clause 6.4 applied beyond your own boundary.
This is why Australian employers ask for ISO 31000-aligned credentials rather than for the standard itself: the standard supplies the vocabulary and method that the prudential framework assumes you already have. If you work in an APRA-regulated entity, that mapping is the practical reason this credential is on the position description.
Organisational risk certification is a separate question from certifying yourself — the ISO 31000 certification guide for Australia covers what applies at the organisation level, and our governance and risk consulting covers doing the work rather than learning it.
Risk Manager teaches the process. These are the artefacts you would produce running it for real — published in full, free, no email required.
The official PECB course and exam package starts at $594 + GST — with no separate exam fee after enrolment. Optional Aegentra Labs exam preparation is clearly priced separately.
The exam voucher is included in your enrolment, and so is one free resit if you don't pass first time. Both the exam and the credential are issued directly by PECB.
This exam leads to two credentials: PECB Certified ISO 31000 Provisional Risk Manager (no experience required) and PECB Certified ISO 31000 Risk Manager (two years of professional experience, one of it in risk management, plus 200 hours of risk management project activity). Both require signing the PECB Code of Ethics and are maintained through continuing professional development. The Lead Risk Manager and Senior Lead Risk Manager credentials require the separate Lead Risk Manager exam.
Official training + independent exam preparation
Aegentra Academy provides the official PECB course, learning materials and examination pathway. Aegentra Labs is the separate practice workspace for a sourced exam guide, original PECB-style questions, timed exam mode, answer review and domain-level results for this exact qualification.
Labs practice is supplementary, independently authored and not official PECB course content or an examination guarantee.
/ Before you enrol
These answers use this course's current catalogue record and PECB's published exam, certification, and maintenance policies.
The published price is A$594 for Self-Study or A$649 for eLearning, before tax. It includes the official PECB course materials, 12 months of access, the first exam attempt, one free retake, and the certification application fee. PECB’s partner-course policy also includes the first year of the Annual Maintenance Fee where maintenance applies; Foundation and Provisional credentials are maintenance-exempt. There is no separate first-exam or certification-application charge after enrolment.
PECB’s current maintenance policy lists no maintenance fee for Foundation, Provisional, or Transition credentials. For all other PECB certifications, the published fee is $390 per three-year certification cycle, together with the applicable CPD requirements and continued adherence to the PECB Code of Ethics. PECB sets this fee and may change it, so check the linked policy before renewal.
Yes. Every Academy course supports AUD and multiple local currencies, including NZD, USD, SGD, GBP, EUR, INR, AED, MYR, PHP, IDR, and VND when a live quote is available. Currency and tax are separate: an Australian billing address adds 10% GST, while a non-Australian billing address has no Australian GST. For example, an Australian working in New Zealand may pay in NZD and use an Australian billing address, but 10% GST will still be added because the billing address is Australian.
Self-Study costs A$594 before tax and uses the official PECB slide-based materials. eLearning costs A$649 before tax — A$55 more — and adds recorded trainer-led lessons and interactive learning activities. Both routes lead to the same PECB exam and credential, and both include the same exam package. Choose eLearning if explanations and video guidance help you learn; choose Self-Study if you are comfortable working through standards-based material independently and want the lowest price.
Yes. PECB publishes remote online exam sessions that candidates can take from home or another suitable location through the PECB Exams application. The published course record lists these exam facts: duration — Timed exam, sat online under remote proctoring; format — Open-book, multiple-choice — stand-alone and scenario-based questions; assessment — 60 multiple-choice questions across 3 competency domains — fundamental principles and concepts of risk management, establishment of a risk management framework, and implementation of a risk management process.; pass mark — 70%; language — English (other PECB languages available on request). New Zealand candidates should choose a published session that suits their local time, meet PECB’s identity and technical requirements, and complete the system check before exam day. PECB’s general exam policy does not publish a New Zealand restriction.
This exam leads to two credentials: PECB Certified ISO 31000 Provisional Risk Manager (no experience required) and PECB Certified ISO 31000 Risk Manager (two years of professional experience, one of it in risk management, plus 200 hours of risk management project activity). Both require signing the PECB Code of Ethics and are maintained through continuing professional development. The Lead Risk Manager and Senior Lead Risk Manager credentials require the separate Lead Risk Manager exam. Passing the exam does not by itself guarantee the highest experience-based credential tier. PECB requires an online certification application and reference contact details, and its Certification Department decides whether the education, professional experience, and risk-management activity requirements are met.
PECB’s public certification-process page does not publish a closed list of documents that automatically proves project hours. It requires the online application and contact details for references who may be contacted to validate your experience. Keep a dated activity log showing the organisation or client, your role, the risk-management activity, dates, responsibilities, and hours; retain employer or client confirmations, statements of work, timesheets, or similar records in case PECB asks for support. The PECB Certification Department assesses the application and makes the final decision.
6 modules, fully on-demand. Click any module to see the topics inside.
Named trainers are shown only where their role and public credentials can be verified. Delivery mode varies by course and selected cohort.
Risk, Business Continuity & Information Security Expert
A renowned consultant, speaker, and certified trainer excelling in Business Continuity, Information Security, Crisis Management, Disaster Recovery, and Risk Management, with over 20 years of global experience. As Managing Director of Business As Usual in Australia, she has consulted to central banks, government entities, and global corporations. Proficient in ISO 22301, ISO 31000, and ISO/IEC 27001, she has earned accolades including Risk Consultant of the Year.
PECB credentials stack — Foundation establishes the language, Lead Implementer builds the system, Lead Auditor verifies it. Pick the level that matches the work you will actually be doing.
Entry-level pathway to ISO 31000:2018 — risk principles, framework, and process.
8–12 hours · self-paced
Risk management framework, process, and integration across the business.
25–35 hours · self-paced
Lead an enterprise risk program end to end — design, deploy, and chair the framework.
35–45 hours · self-paced
PECB ISO 31000 Risk Manager is the certification a hiring manager looks for when the role is to operate the risk-management process inside a function or business unit — facilitate risk workshops, populate and maintain the risk register, propose treatment plans, monitor KRIs, and report into the broader enterprise-risk framework. It is the difference between someone who has heard of risk management and a credentialled practitioner who can lead a risk programme at the operational level.
Risk Manager, Operational Risk Manager, Risk Officer, Senior Risk Analyst, Compliance and Risk Manager — every one of these roles in the Australian market treats Risk Manager as a strong credential. APRA-regulated entities under CPS 220/230, ASX-listed companies under Principle 7, Commonwealth and state government risk functions, and large mining / energy / critical-infrastructure operators all weight it positively.
The methodology trained by Risk Manager — applying the ISO 31000 principles, framework, and process to real operational decisions — transfers directly to ISO 27001 information-security risk, ISO 27005 (more specific to InfoSec risk), ISO 22301 business continuity, and ISO 42001 AI risk. Practitioners who hold Risk Manager and an information-security credential together are routinely promoted into integrated GRC roles.
For mid-tier Australian risk-advisory engagements (operational risk reviews, control-effectiveness assessments, risk-register builds), procurement asks "are your practitioners PECB Risk Manager certified?". The credential is what unlocks billable-day rates in the $1,200-$1,800 AUD range for operational-risk consulting work.
Banks, mutuals, insurers, and superannuation funds operating under APRA CPS 220 and CPS 230 staff their second-line risk functions with credentialled risk managers. Risk Manager is the credential most commonly held by operational-risk officers and second-line analysts running the day-to-day risk framework.
ASX-listed entities use Principle 7 risk-framework disclosures as table stakes for institutional investor engagement. Risk Manager is the credential held by the risk team feeding board reports, audit-committee dashboards, and internal-audit cycles.
Federal agencies, state government departments, and large statutory authorities run risk functions explicitly aligned with ISO 31000 via the Commonwealth Risk Management Policy (Comcover) or state equivalents. Risk Manager is the standard credential for the risk staff designing and operating those programmes.
Resource-sector and critical-infrastructure operators run cross-hazard risk programmes covering safety, environmental, cyber, supply-chain, and operational hazards. Risk Manager is the credential held by the risk practitioners designing and operating those integrated programmes — particularly important for SOCI Act Risk Management Programmes.
The exam is open-book, but the questions reward fluency, not lookup. Plan your study around these checkpoints.
Step-by-step certification process, realistic AUD costs, audit timelines, and how this course fits into a wider readiness program — senior-engineer written, updated for 2026.
ReadCareer guideThe credential tiers, the 200 hours of project activity the full Risk Manager credential requires, why this exam does not reach Lead Risk Manager, and the enterprise-risk roles it opens.
ReadFree learning resources
Use Aegentra’s existing templates, checklists, registers and mappings alongside your course. No account or email is required.
Free companion reading for anyone studying or applying ISO 31000:2018, the international risk management standard:
Compare the family
The ISO 31000 family page compares current levels, prices, delivery, audiences and exam facts before you choose a pathway.
Compare ISO 31000 pathwaysSource and review status
Price, delivery and course content are generated from Aegentra’s authoritative catalogue record. The official PECB course page and exam policy are linked directly below. Source-link checks and substantive human review are tracked separately so one is never presented as the other.
Official PECB sources
Editorial accountability
Harry Sidhu owns publication of this record. A separate course-specific substantive reviewer has not yet been recorded.
Substantive review status
Official source links are checked separately. A course-specific substantive review date will be published when completed.
Yes. PECB certifications are internationally accredited and are accepted on Australian resumes, tender responses and procurement panels. Australia has no separate national licence for ISO 31000 Risk Manager — the recognition comes from the accreditation behind the credential, which is international.
PECB’s professional certifications are accredited under ISO/IEC 17024 — the international standard for bodies certifying persons — by IAS, UKAS, KAB and COFRAC. Its Foundation certificate programs are separately accredited by ANAB (ANSI National Accreditation Board) under ANSI/ASTM E2659.
Aegentra Academy is an official PECB authorised training partner in Australia, which is what allows this course to include the official PECB examination voucher rather than billing it separately. You can confirm that directly with PECB through the official PECB partner directory.
This official PECB course is sold and supported by Aegentra Academy. PECB supplies the course material, examination and professional credential scheme. Aegentra's wider practice also runs governance, risk and compliance engagements and Microsoft 365 hardening for Australian organisations. Named eLearning trainers are credited separately on this page when the course record supplies them.
Courses run online and self-paced through the myPECB platform, so professionals across Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra and New Zealand enrol online. Instructor-led cohorts and in-person delivery in Melbourne and Sydney are available on request. Multi-seat team pricing is available for five or more seats — email Academy@aegentra.com.au for an enterprise quote. Tax invoices with GST and ABN are issued automatically at checkout.
For anyone who builds or runs a risk register it usually is. Risk Manager goes past vocabulary into method — establishing context and risk criteria, running assessments, and selecting treatments you can defend to an executive or an auditor. It maps to Risk Manager, Operational Risk Analyst and GRC roles across Australian financial services, government and critical infrastructure. PECB credentials are accredited under ISO/IEC 17024 by UKAS, IAS and COFRAC, and the course carries 21 CPD credits. Remember that only individuals can be certified against ISO 31000 — an organisation cannot be.
The PECB ISO 31000 Risk Manager course costs $594 + GST through Aegentra Academy, reduced from $849, and the official PECB exam voucher is included — there is no separate examination fee. The guided eLearning version is $649 + GST, reduced from $928. Either price also covers the full course materials, 12 months of myPECB access, and one free resit within 12 months. The exam itself is open-book and remotely proctored, so you can sit it from anywhere in Australia.
Six modules covering the ISO 31000 principles, framework, and process applied at the operational level — risk identification techniques, risk analysis (quantitative and qualitative), risk evaluation, risk treatment selection, communication and consultation, monitoring and review, and the integration of risk into business processes. Total effort is 25-35 hours of self-paced study.
Recommended but not required. If you have direct risk-management experience or have implemented controls in a previous role, you can go straight to Risk Manager. If risk is genuinely new to you, Foundation first is the faster total path because you avoid plateauing on vocabulary.
60 multiple-choice questions across three competency domains — fundamental principles and concepts of risk management, establishment of a risk management framework, and implementation of a risk management process. It is open-book: a hard copy of ISO 31000, the course materials and your own notes are permitted. Pass mark is 70%. PECB does not publish a duration for this exam in its candidate handbook. Passing awards Provisional Risk Manager (no experience required) or Risk Manager (two years of professional experience, one of it in risk management, plus 200 hours of risk management project activity). Lead Risk Manager requires the separate Lead Risk Manager exam.
Risk Manager is the practitioner credential — for staff running risk processes at the function or business-unit level. Lead Risk Manager is the senior pathway — for Chief Risk Officers, Heads of Risk, and senior consultants leading enterprise-wide risk programmes across an organisation. Lead Risk Manager assumes deeper professional experience and broader scope.
Every authorised PECB Risk Manager course leads to the same credential — the certificate is identical wherever you buy it. The differences are price, format, and who supports you. Aegentra delivers Risk Manager at $594 + GST — reduced from $849 — with the exam voucher and one free resit included. The Australian-context worked examples are informed by current governance and risk practice.
Indirectly. APRA standards impose obligations on APRA-regulated entities; ISO 31000 provides the methodology that supports both. Most APRA-regulated entities use ISO 31000 as the methodology underlying their CPS 220/230 frameworks. Risk Manager prepares you to participate credibly in those frameworks.
Yes — it is one of the most common methodologies imported into ISO 27001 risk registers and Statements of Applicability. ISO/IEC 27005 (the information-security risk companion) is more specific, but many implementations use ISO 31000 as the broader framework with ISO 27005 layered for information-security context.
Typical effort is 25-35 hours of self-paced study spread over three to five weeks. You have 12 months of myPECB access so the pace is yours. Most working professionals complete it in 4-6 weeks of evenings.
PECB awards 21 CPD credits on completion of the ISO 31000 Risk Manager course. These count toward CPD requirements at RIMS Australasia, IIA Australia, ISACA, and other professional bodies on submission.
Yes. Risk Manager is recognised for independent risk-advisory work at the operational level. For enterprise-wide risk programme leadership, Lead Risk Manager is the credential most consulting buyers ask for.
Yes. Either complete checkout yourself and forward the Stripe tax invoice for reimbursement, or write to Academy@aegentra.com.au and we will issue an invoice direct to your organisation with payment terms. Groups of five or more receive a discount.
Immediately after payment. The Academy team confirms your seat with PECB and you receive login details by email — usually within one business day.
You have 12 months of access from enrolment. That window covers the course material, the official PECB exam, and one free resit if you need it.
One PECB-issued resit is included in your enrolment at no extra cost. Aegentra does not publish a pass-rate claim without an audited cohort dataset.
Questions about invoicing, GST, group bookings, refunds or instructor-led delivery? Read the Academy FAQ.