← All courses

Practitioner · Risk management

Risk Management

Bring a structured approach to risk decisions.

Follow the risk management process from identification to treatment, using ISO 31000:2018 as the foundation for a consistent approach.

Secure payment by Stripe · for yourself or for your team

Standard and editionISO 31000:2018

Last updated28 September 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from Risk Management before you enrol.

Risk ManagementSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Understand the stages of the risk management process.
  • Connect risk identification and assessment to treatment decisions.
  • Use a consistent approach to discussing and managing risk.

Part of: Quality Risk and Continual Improvement Training

Inside the course

A clear path through the essentials.

26 modules, 26 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam.

Part 1Module 1Approx. 7 min
  1. Your instinct already has a name7 min
  2. Practice: Your instinct already has a name3 questions
Part 2Module 2Approx. 7 min
  1. No objective, no risk7 min
  2. Practice: No objective, no risk3 questions
Part 3Module 3Approx. 6 min
  1. Before the incident: what keeps you awake6 min
  2. Practice: Before the incident: what keeps you awake3 questions
Part 4Module 4Approx. 6 min
  1. Why it pays, and when it fails6 min
  2. Practice: Why it pays, and when it fails3 questions
Part 5Module 5Approx. 5 min
  1. Your turn: risk, or just a worry?5 min
  2. Practice: Your turn: risk, or just a worry?3 questions
Part 6Module 6Approx. 6 min
  1. Eight principles, one purpose6 min
  2. Practice: Eight principles, one purpose3 questions
Part 7Module 7Approx. 6 min
  1. What real looks like, and the thread6 min
  2. Practice: What real looks like, and the thread3 questions
Part 8Module 8Approx. 6 min
  1. Rules first: scope, context, criteria6 min
  2. Practice: Rules first: scope, context, criteria3 questions
Part 9Module 9Approx. 6 min
  1. Write the risk so anyone can act6 min
  2. Practice: Write the risk so anyone can act3 questions
Part 10Module 10Approx. 7 min
  1. Every category, every source7 min
  2. Practice: Every category, every source3 questions
Part 11Module 11Approx. 5 min
  1. Your turn: ten risks for your company5 min
  2. Practice: Your turn: ten risks for your company3 questions
Part 12Module 12Approx. 7 min
  1. Scales you can defend7 min
  2. Practice: Scales you can defend3 questions
Part 13Module 13Approx. 7 min
  1. One matrix, four zones, three rows scored7 min
  2. Practice: One matrix, four zones, three rows scored3 questions
Part 14Module 14Approx. 6 min
  1. Accept or treat, and who signs6 min
  2. Practice: Accept or treat, and who signs3 questions
Part 15Module 15Approx. 7 min
  1. Four Ts, new risks and the plan7 min
  2. Practice: Four Ts, new risks and the plan3 questions
Part 16Module 16Approx. 7 min
  1. Your turn: build the register7 min
  2. Practice: Your turn: build the register3 questions
Part 17Module 17Approx. 7 min
  1. Keep it alive: review, record, report7 min
  2. Practice: Keep it alive: review, record, report3 questions
Part 18Module 18Approx. 7 min
  1. ISO 9001:2026: where risk lives7 min
  2. Practice: ISO 9001:2026: where risk lives3 questions
Part 19Module 19Approx. 6 min
  1. ISO 9001:2026: process by process6 min
  2. Practice: ISO 9001:2026: process by process3 questions
Part 20Module 20Approx. 7 min
  1. ISO/IEC 27001 (1): risk is the engine7 min
  2. Practice: ISO/IEC 27001 (1): risk is the engine3 questions
Part 21Module 21Approx. 5 min
  1. ISO/IEC 27001 (2): scenarios or assets5 min
  2. Practice: ISO/IEC 27001 (2): scenarios or assets3 questions
Part 22Module 22Approx. 8 min
  1. ISO/IEC 27001 (3): risks to the SoA8 min
  2. Practice: ISO/IEC 27001 (3): risks to the SoA3 questions
Part 23Module 23Approx. 7 min
  1. Hazards, found before harm7 min
  2. Practice: Hazards, found before harm3 questions
Part 24Module 24Approx. 6 min
  1. The workers who know the hazards6 min
  2. Practice: The workers who know the hazards3 questions
Part 25Module 25Approx. 7 min
  1. Controls for people: the hierarchy7 min
  2. Practice: Controls for people: the hierarchy3 questions
Part 26Module 26Approx. 7 min
  1. One register, clear roles, a living culture7 min
  2. Practice: One register, clear roles, a living culture3 questions

Frequently asked questions

Your questions,
answered.

About Risk Management, its certificate and enrolment.

Ask Sterling
Who is the Risk Management course for?

It is for risk owners and management system practitioners: managers, process owners and team members who identify, assess or treat risk, or who discuss risk decisions in their organisation. It suits people working with any ISO management system, as well as anyone who wants a structured, consistent way of talking about and managing risk.

What does the Risk Management course cover?

The course follows the risk management process from identification to treatment, using ISO 31000:2018 as the foundation for a consistent approach. Learners understand the stages of the process, connect risk identification and assessment to treatment decisions, and learn to use a consistent approach when discussing and managing risk with colleagues and management.

How long does the Risk Management course take?

Risk Management is a set of short video modules followed by practice questions and a final exam. The course page shows the current number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for Risk Management. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Is the course online and self-paced?

Yes. Risk Management is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

Risk Management is US$29 per learner. Teams save 20% for 11 to 50 learners and 30% for 51 to 200 learners; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Is this an ISO 31000 certification?

No. The Certificate of Completion is a training certificate: it shows that one person completed Risk Management and reached the pass mark in its final exam. It is not certification of an organisation to any standard, and Sterling does not certify organisations. The certificate does not certify an organisation's risk management or its management system.

Which standard is the Risk Management course based on?

The course uses ISO 31000:2018, the international guidance standard on risk management, as the foundation for a consistent approach. It follows the risk management process from identification through assessment to treatment, so that learners can apply the same structured thinking to risks in quality, information security, health and safety or any other management system.

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Training records
Supports the competence requirement (clause 7.2) of ISO 9001:2026 and ISO/IEC 27001:2022 for the people who assess and treat risk, with a dated record of who completed the training and their final exam result.
Ask about course requirements

Your next step

Ready to put this into practice?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Run it in Effivity

Effivity is our no-code ISO and GRC software: documents, risks, audits, nonconformities and corrective actions, objectives and training records in one place.

Start an Effivity trial

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs