PECB EBIOS Risk Manager - Self-Study Pack 1-year access ⎹ EBIOS Risk Manager exam & second chance included

495,00 € tax excl.

Learn ANSSI's cyber risk method at your own pace. Exam, certificate and one free retake included.

EBIOS Risk Manager is the digital risk assessment method published by ANSSI, France's national cybersecurity agency. Unlike compliance-driven approaches, it is built around the attacker: who would target you, what they want, and the strategic and operational paths they would take to get it. The method is structured in five workshops, from scoping to risk treatment, and slots directly into an ISO/IEC 27001 implementation.

This self-study pack gives you the full PECB training material, quizzes and case-study exercises modelled on the exam, and everything you need to sit the certification when you're ready.

Need a classroom training for your team? Contact us to receive your personal quote.

More info

What’s included ? 

  • Complete PECB training materials and exercises, downloadable and yours to keep
  • Quizzes and case-study exercises built to mirror the exam format
  • The certification exam, taken online from home or the office
  • One free retake if you don't pass the first time
  • The certification application fee
  • Your first year of Annual Maintenance Fee

Not included: ISO/IEC 27001 and 27005 standards, which you can buy through the store in your MyPECB account. You won't need to buy the EBIOS RM method guide itself — ANSSI publishes it free, and we recommend printing it, since you're allowed to bring a hard copy into the exam.

Course & Learning Objectives

  • Explain the concepts and principles of information security risk management as EBIOS RM frames them
  • Run a full EBIOS RM study end to end, from scoping to a risk treatment strategy
  • Steer, monitor and re-scope a study when you're the one commissioning or overseeing it, rather than doing the analysis yourself
  • Build strategic and operational attack scenarios, and assess their likelihood
  • Interpret an EBIOS RM study's findings and key deliverables
  • Present risk results to decision-makers who don't speak security

Course Content

The course follows the five workshops of the method:

  1. Scope and security baseline — objectives, roles, business and technical scope, feared events and their severity
  2. Risk origins — identifying risk origins and their target objectives, and prioritising the pairs that matter
  3. Strategic scenarios — mapping your ecosystem, assessing stakeholder threat levels, building attack paths
  4. Operational scenarios — the technical modes of attack behind each path, and how to assess likelihood
  5. Risk treatment — treatment strategy, security measures, residual risk and ongoing monitoring

It also covers where EBIOS RM sits next to ISO/IEC 27005: 27005 is the normative framework, EBIOS RM is a concrete, prescriptive way to implement it.

Who is this self-study pack for?

  • Risk managers and information security officers who need a repeatable method rather than a spreadsheet
  • Anyone taking part in risk assessments and wanting to contribute properly to EBIOS RM workshops
  • Consultants and ISMS implementers working with French or EU-regulated clients
  • Managers who need to commission a study, judge its quality, and act on what it says

Prerequisites

A basic working knowledge of risk management. No prior EBIOS experience needed.

About the PECB EBIOS Risk Manager Exam

You'll get access in MyPECB to sit the exam from home or the office, supervised remotely by a PECB invigilator through the PECB Exams app. You'll need a valid photo ID and a webcam, and you should be ready 30 minutes before the start.

  • Duration: 3 hours (plus 20 minutes on request if you're sitting it in a non-native language)
  • Format: open book. You may use a printed copy of the EBIOS RM guide, your course materials, and your own notes. No phones or tablets.
  • Questions: 60 in total — 57 multiple-choice (three options each, some stand-alone and some scenario-based) and 3 essay-type questions
  • Passing score: 70%
  • Languages: English and French

Passing the exam lets you apply for a PECB credential. Two levels exist:

  • EBIOS Provisional Risk Manager — no professional experience required
  • EBIOS Risk Manager (Confirmed) — requires this training (or two years of relevant experience), plus having applied a significant part of the method in real conditions at least once in the last three years, and two professional references

Both require signing the PECB Code of Ethics. Certifications run for three years and are maintained with CPD hours and an annual maintenance fee — your first year is covered in the price.

Learn more about the EBIOS Risk Manager Course by reading the Candidate Handbook.

Self-Study & Exam Delivery

We will process your order within a maximum of two working days. First, you will receive an invitation from PECB to create your MyPECB account and confirm your email address. Once this step is complete, we will be able to activate your training and exam.

This self-paced training pack runs through My PECB. It includes:

  • Downloadable training materials and exercises
  • Quizzes to reinforce learning
  • The online exam with second chance
  • The certification fees

Important: you have 12 months from your purchase date to sit the exam, use your retake if needed, and submit your certification application.

Do you need e-learning for multiple users? Please contact us on +32 2 3351236 or send us a request for a quotation.

Questions / Answers

Be the first to ask a question about PECB EBIOS Risk Manager - Self-Study Pack

Data sheet

Category Cybersecurity, Audit & Governance
Certification PECB ⎹ Cybersecurity
Level Foundation
Exam Exam included
Haut de la page

Product successfully added to your shopping cart

Subtotal of your cart (1 item) (tax excl.) :
Go to my cart Continue shopping