The EBIOS Risk Manager training course provides participants with the comprehensive knowledge and competencies required to master information security risk management concepts and components using the EBIOS methodology, applied to all relevant organizational assets.
Through practical exercises and case studies, this training enables attendees to develop the skills necessary to conduct thorough information security risk assessments and implement effective, timely risk management processes within the framework of the risk management lifecycle. The course aligns closely with the implementation requirements of the ISO/IEC 27001 standard.
Upon mastering the EBIOS risk assessment concepts, participants may take the examination to qualify for the “PECB Certificate Holder in EBIOS Risk Manager” credential. Earning this certification demonstrates practical knowledge and professional ability to support organizations in performing risk assessments in accordance with the EBIOS method.
The training course enables participants to understand risk management concepts and the foundational principles of the EBIOS methodology.
Participants will learn to direct EBIOS study activities across key phases—such as pilot, control, and reframing—while acting in a supervisory role.
They will be able to interpret, articulate, and present the findings and key deliverables of an EBIOS assessment.
Attendees will acquire the practical competencies required to conduct a full EBIOS study effectively.
The course equips participants with the skills necessary to manage information security risks within an organization’s systems.
Finally, participants will develop the ability to analyze and clearly communicate the results of an EBIOS study to relevant stakeholders.
The “PECB EBIOS Risk Manager” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:
Domain 1: Fundamental principles and concepts of Information Security risk management process based on the EBIOS method
Domain 2: Information Security risk management framework based on the EBIOS method
Domain 3: Information Security risk assessment using the EBIOS method
For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.
After successfully completing the exam, you can apply for the credential shown on the table below.
The certificate requirements for the EBIOS Risk Manager are:
| Credential | Exam | Risk Management experience | Other requirements |
|---|---|---|---|
| PECB Certified EBIOS Provisional Risk Manager | PECB Certified EBIOS Risk Manager exam or equivalent | None | Signing the PECB Code of Ethics |
| PECB Certified EBIOS Risk Manager Confirmed | PECB Certified EBIOS Risk Manager exam or equivalent | • Follow an EBIOS Risk Manager training or have relevant professional experience of at least 2 years; and • Have followed a significant part of the EBIOS method in real conditions at least one in the three years preceding the certification request | Signing the PECB Code of Ethics |
To ensure validity, risk assessment activities must adhere to established best practices and encompass the following key components:
Establishing a formalized risk management framework.
Designing and deploying a comprehensive, organization-wide risk management process.
Defining clear and consistent risk evaluation criteria.
Conducting thorough risk assessments.
Systematically identifying assets, threats, existing controls, vulnerabilities, and potential consequences.
Assessing the severity of consequences and the likelihood of incidents.
Evaluating options for risk treatment and mitigation.
Conducting regular reviews of the risk management process to ensure its ongoing effectiveness.
The training course fee includes all associated certification and examination costs.
Participants will receive comprehensive training materials, comprising over 200 pages of instructional content and practical examples.
Attendees who complete the training will be awarded a certificate of course completion, valid for 21 Continuing Professional Development (CPD) credits.
Should a participant not pass the examination on the first attempt, one complimentary retake is available within a 12-month period.
Course agenda
Day 1
Day 2
Day 3
