
Information Security
ISO/IEC 27005Risk management is the engine of any serious information security programme. This course gives risk leaders a structured, ISO/IEC 27005-aligned way to detect, treat, and prevent information security risk — and it goes wide on method, working through OCTAVE, EBIOS, MEHARI, CRAMM, NIST, and the Harmonized TRA so participants can pick the assessment approach that fits their organisation. It dovetails with ISO/IEC 27001 and draws on the ISO 31000 risk principles.
A fundamental understanding of ISO/IEC 27005 and comprehensive knowledge of risk management and information security.
The exam spans six competency domains, from ISRM principles and programme implementation through risk assessment, treatment, monitoring, and assessment methodologies.
Credential tiers
DAI Consultancy delivers ISO/IEC 27005 Lead Risk Manager as a corporate cohort — in-person, virtual, or hybrid — structured around your organisation's objectives.