More study resources

About this exam

The PECB ISO 31000 Foundation credential is an entry-level certification that demonstrates understanding of the fundamental concepts of risk and of risk management methodologies based on the guidelines of ISO 31000. The training course presents the basic principles and approaches of managing risks and opportunities, covering key terminology, the risk management framework, and the process for identifying, analyzing, evaluating, and treating risks in a consistent, structured manner. It is intended for individuals who wish to learn the basic concepts and principles of risk management, individuals responsible for the creation and protection of value in an organization, personnel tasked with managing risks and opportunities in their area of responsibility, and individuals interested in pursuing a career as a risk manager. The exam covers two competency domains: fundamental principles and concepts of risk management, and the risk management framework and risk management process. To prepare, candidates complete the two-day training course, whose quizzes closely mirror the certification exam structure, and review the more than 200 pages of training materials with practical examples, exercises, and quizzes. Completing the course and passing the exam allows candidates to apply for the Certificate Holder in ISO 31000 Foundation designation; there are no prerequisites for professional or project experience. This page is an independent study resource and is not affiliated with or endorsed by PECB.

What you'll study

Common questions

About PECB ISO 31000 Foundation preparation

Do I need any prior experience to sit the ISO 31000 Foundation exam?

No. The course states there are no prerequisites to participating in the training course, and the credential is described as entry-level with no requirements for professional or project experience. Completing the training course, passing the exam, and applying for the certificate are the only certificate program requisites.

What does the exam actually test?

It covers two competency domains: Domain 1, fundamental principles and concepts of risk management, and Domain 2, the risk management framework and risk management process. Expect terminology, the framework guidelines, and the process steps from initiation through assessment, treatment, recording and reporting, monitoring and review, and communication and consultation.

How is the training course structured?

It runs over two days. Day 1 covers introduction to risk management, ISO 31000 components, and initiation of the risk management process. Day 2 covers risk assessment, risk treatment, recording and reporting, monitoring and review, and communication and consultation according to ISO 31000. The course is learner-centered and encourages discussion and exchange of ideas.

How should I order my study?

Follow the course sequence: first terminology and principles, then the framework components, then the process. Within the process, learn initiation before assessment, and assessment before treatment, because later steps depend on earlier outputs. Finish with recording and reporting and the two cross-cutting activities, monitoring and review, and communication and consultation.

What happens if I fail my first attempt?

Candidates who completed the training course with one of PECB's partners and failed the first exam attempt are eligible to retake the exam for free within a 12-month period from the course completion date, because the course fee includes a first attempt and one retake. Otherwise, retake fees apply.

Are exam and certificate fees separate from the course price?

No. Certificate and examination fees are included in the price of the training course. Participants also receive more than 200 pages of training materials, and those who attend receive an attestation of course completion worth 14 CPD credits.

What are the most common failure modes?

The most frequent weaknesses are confusing the framework with the process, treating risk treatment as the first step rather than a later one, and overlooking the cross-cutting roles of communication and consultation and of monitoring and review. Candidates also lose marks on terminology. The in-course quizzes mirror the exam structure, so use them to find gaps early.

What do I receive after passing?

You can apply for the PECB Certificate Holder in ISO 31000 Foundation credential, which demonstrates that you understand the fundamental concepts of risk and the methodologies for risk management based on ISO 31000 guidelines. Certificate holders must also sign the PECB Code of Ethics.

Is this page an official PECB resource?

No. This is an independent study resource built for candidates preparing for the exam. It is not affiliated with, endorsed by, or sponsored by PECB. Always confirm exam rules, scheduling, and policies directly with PECB before you register or book an attempt.