- Training course objectives and structure
- Introduction to EBIOS RM method
- Workshop 1 Scope and security baseline
- Workshop 2 Risk origins
- Workshop 3 Strategic scenarios
- Workshop 4 Operational scenarios
- Workshop 5 Risk treatment
- Closing of the training course
- Certificate exam
- Domain 1: Fundamental principles and concepts of Information Security risk management process based on the EBIOS method
- Domain 2: Information Security risk management framework based on the EBIOS method
- Domain 3: Information Security risk assessment using the EBIOS method
To be considered valid, these risk assessment activities should follow best implementation practices and include the following:
- Defining a risk management approach
- Designing and implementing an overall risk management process for an organization
- Defining risk evaluation criteria
- Performing risk assessment
- Identifying assets, threats, existing controls, vulnerabilities and consequences (impacts)
- Assessing consequences and incident likelihood
- Evaluating risk treatment options
- Performing a risk management review
- Certificate and examination fees are included in the price of the training course
- Training material containing over 200 pages of information and practical examples will be distributed
- An attestation of course completion worth 21 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
- In case of exam failure, you can retake the exam within 12 months for free
Why should you attend?
ISO/IEC 27001
Educational approach
- This training is based on both theory and best practices of risk assessment using the EBIOS method
- Lecture sessions are illustrated with examples based on case studies
- Practical exercises are based on case studies which include role playing and discussions
- Practical exercises and examples are similar to the Certificate Exam
Prerequisites
What is the PECB EBIOS Risk Manager course?
The PECB EBIOS Risk Manager course is a practical and in-depth training program focused on mastering the EBIOS risk analysis methodology as defined by ANSSI (Agence Nationale de la Sécurité des Systèmes d'Information). EBIOS is one of the most structured and strategic frameworks for conducting cyber risk assessments, used by public authorities, critical infrastructure operators, and private organizations across Europe. This course teaches participants how to apply the EBIOS Risk Manager approach to identify cyber threats, assess business impact, evaluate risk scenarios, and prioritize treatment measures. It helps organizations align cybersecurity strategy with business needs, regulatory obligations (like NIS2, GDPR), and ISO/IEC 27005 or ISO/IEC 27001 frameworks.
Who should take the PECB EBIOS Risk Manager course?
This course is ideal for cybersecurity and risk professionals, including information security officers, risk analysts, GRC consultants, and compliance managers. It is also valuable for project managers, auditors, and members of internal security or governance teams who are involved in risk evaluation and mitigation planning. Professionals working within regulated industries, government agencies, or organizations with critical infrastructure will especially benefit from mastering EBIOS, as it is often a preferred or required methodology in these environments.
What will I learn in the PECB EBIOS Risk Manager course?
Participants will learn how to conduct a complete risk assessment using the five steps of the EBIOS Risk Manager method: context establishment, feared event identification, risk scenario construction, risk analysis, and risk treatment selection. The course emphasizes how to identify high-stakes assets and business processes, define realistic cyber-attack scenarios, assess their likelihood and impact, and communicate risk insights to both technical and executive stakeholders. Learners also explore how to align EBIOS with ISO/IEC 27005, ISO/IEC 31000, and national regulatory frameworks. Through workshops and case studies, participants will gain hands-on experience in structuring risk studies that support real-world decision-making and prioritization.
How long is the PECB EBIOS Risk Manager course?
The course typically spans three days, combining theory, practical workshops, group exercises, and interactive case studies. It is structured to guide learners through each phase of the EBIOS method in detail, offering templates, tools, and guidance that can be directly applied to organizational risk management projects. The format ensures that by the end of the course, participants will be able to independently conduct structured risk analyses and facilitate workshops within their own teams or client environments.
Is there a certification exam included in the course?
Yes. The course concludes with a formal PECB certification exam. Upon passing, participants are awarded the PECB Certified EBIOS Risk Manager Certificate, an internationally recognized credential that demonstrates proficiency in using the EBIOS methodology to assess and manage cyber risk. This certification is especially valuable in European contexts and for professionals working on compliance, cyber resilience, or regulatory alignment initiatives.