Information Security Risk Management (ISO/IEC 27005)

It is for people who run or take part in information security risk management: ISMS leads, risk owners, IT and security managers, and members of ISO/IEC 27001 implementation teams. It suits organisations building an ISMS and those improving an existing risk process. A working knowledge of ISO/IEC 27001 helps; learners new to the subject may start with Sterling Academy's ISO/IEC 27001 awareness training.

It covers how ISO/IEC 27005:2022 supports the risk requirements of ISO/IEC 27001:2022; context establishment and risk criteria; identifying risks through assets, threats, vulnerabilities and risk scenarios; analysing consequences, likelihood and levels of risk; evaluating and prioritising risks; and treatment, from choosing options and controls to the Statement of Applicability, the risk treatment plan, risk owner approval and acceptance of residual risk.

It is a set of short video modules, each followed by practice questions, and a final exam. The course page shows the number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for Information Security Risk Management (ISO/IEC 27005). Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Yes. Information Security Risk Management (ISO/IEC 27005) is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Information Security Risk Management (ISO/IEC 27005) has a list price of US$149 per learner, with a limited-time offer of US$99 per learner until 31 December 2026. Teams save 20% for 11 to 50 learners and 30% for 51 to 200; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

No. The Certificate of Completion is a training certificate: it shows that one person completed Information Security Risk Management (ISO/IEC 27005) and reached the pass mark in its final exam. ISO/IEC 27005 is guidance, not a standard organisations are certified to, and Sterling does not certify organisations. An organisation is certified to ISO/IEC 27001 by an independent certification body after that body's own audit.