ISO 31000 RM
PECB Certified ISO 31000 Risk Manager
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
ISO 31000 is the international guideline for managing risk in organizations, and the PECB Certified ISO 31000 Risk Manager credential is designed for people who must turn those guidelines into working practice: managers and consultants responsible for the effective management of risk, individuals responsible for the creation and protection of value, and professionals building a career in risk management. The path starts with a four-day training course whose final day is the certification exam. Days one to three move from the fundamental principles of risk management and the establishment of a risk management framework, through initiation of the risk management process and risk assessment, to risk treatment, recording and reporting, monitoring and review, and communication and consultation - closely mirroring the three competency domains the exam covers. Participants receive more than 300 pages of training material with practical examples, exercises and quizzes, and the in-course quiz structure deliberately mirrors the exam. A fundamental understanding of ISO 31000 and comprehensive knowledge of risk management are expected before attending. Candidates who pass can apply for a credential tier ranging from Provisional Risk Manager, which requires no experience beyond signing the PECB Code of Ethics, up to Senior Lead Risk Manager at 10 years of experience, 7 of them in risk management, and 1,000 hours.
What you'll study
About ISO 31000 RM preparation
How long is the course, and when do I sit the exam?
The training course runs four days, and the certification exam is held on Day 4. Days 1 to 3 cover the principles and framework, then the risk management process and risk assessment, then risk treatment, recording and reporting, monitoring and review, and communication and consultation.
Is the exam fee included in the course price?
Yes. PECB states that certificate and examination fees are included in the price of the training course, so the course fee covers a first exam attempt plus one retake. Retake fees apply only outside those conditions.
What happens if I fail my first attempt?
If you completed the course with one of PECB's partners and failed the first attempt, you may retake the exam free of charge within a 12-month period from the course completion date, because the course fee includes a first attempt and one retake. Otherwise, retake fees apply.
How many questions are on the exam, how long is it, and what score do I need to pass?
Those specifics are not published on the course page; PECB directs candidates to the List of PECB Exams and the Exam Rules and Policies for the exam type, available languages and other details. Do not assume figures from other PECB exams - confirm them in those official documents before you plan your timing.
What content does the exam actually cover?
Three competency domains: fundamental principles and concepts of risk management; establishment of a risk management framework; and implementation of a risk management process. The stated learning objectives map directly onto these - explain the principles, establish and improve a framework, and implement a process based on ISO 31000.
Do I need work experience before I can take the exam?
No. You can sit the exam after completing the training course. Experience only matters when you apply for a credential: the Provisional Risk Manager tier requires no professional experience, just a signed PECB Code of Ethics, while higher tiers carry experience and hour requirements.
What are the experience requirements for the Risk Manager credential?
Two years of professional experience, of which one year must be in risk management, plus 200 hours of risk management activity. The Lead Risk Manager tier requires 5 years (2 in risk management) and 300 hours; Senior Lead Risk Manager requires 10 years (7 in risk management) and 1,000 hours.
How should I sequence my study in the days before the exam?
Follow the course arc: first the principles and how a framework is established and improved, then process initiation and risk assessment, then treatment, recording and reporting, monitoring and review, and communication and consultation. Work the quizzes in the 300+ page material, since their structure closely mirrors the certification exam.
Is memorizing definitions enough to pass?
Usually not. The course is built on theory plus best practice, with lecture sessions illustrated by practical examples and discussion strongly encouraged. Be ready to explain how you would establish a framework suited to a specific organizational context and how you would run each step of the process.
Do I get any professional development credit for attending?
Yes. Participants who attend the training course receive an attestation of course completion worth 21 CPD (Continuing Professional Development) credits, alongside more than 300 pages of training materials including practical examples, exercises and quizzes.