ISO 31000 does not certify organisations. It certifies professionals. PECB offers two certifications based on the ISO 31000 framework: the 3-day PECB Certified ISO 31000 Risk Manager for practitioners applying the standard, and the 4-day PECB Certified ISO 31000 Lead Risk Manager for those leading enterprise risk programmes. Both are recognised internationally and validate your ability to plan and improve a risk management process aligned with ISO 31000:2018.
ISO 31000 is a guidelines standard, not a certifiable management system standard. Unlike ISO 27001 or ISO 9001, you cannot get an organisation certified to ISO 31000. What gets certified is the individual professional, through a personal credential that proves competence in risk management based on the ISO 31000 framework. The credentials offered through PECB, the certification body Abilene Academy partners with as Switzerland's only Titanium-level partner, are globally recognised professional certifications that validate your ability to apply ISO 31000:2018 in real organisational contexts. PECB offers two main certification paths for ISO 31000. The PECB Certified ISO 31000 Risk Manager is the entry-level credential, earned by completing a 3-day training course covering the full ISO 31000 framework: establishing scope, context, and criteria; risk identification, analysis, evaluation, and treatment; and the supporting activities of recording, reporting, monitoring, and communication. The exam is 2 hours, delivered online. This is the right credential for professionals integrating risk management into their existing role: compliance officers, internal auditors, project managers, business unit leaders. The PECB Certified ISO 31000 Lead Risk Manager is the advanced credential, earned by completing a 4-day training course that covers the same framework in greater depth, with additional emphasis on leading enterprise risk programmes, designing and implementing a risk management framework at organisational scale, and the governance and reporting structures required to sustain it. The exam is 3 hours, delivered online. This is the right credential for professionals leading risk functions: heads of risk, chief risk officers, senior consultants, and managers implementing risk programmes across business lines. Both certifications follow the same exam format, both are recognised under PECB's accreditation, and both are valid for three years with annual maintenance. The choice between them depends on your role and your experience level. At Abilene Academy, our exam pass rate across PECB programmes is 99%, and we offer a free exam retake if you do not pass on the first attempt. Both certifications are delivered in English, French, and Spanish, across Lausanne, Geneva, Zürich, Paris, and online. To choose the right path: if you are integrating risk management into your existing role and want a structured framework you can apply immediately, start with Risk Manager. If you are responsible for designing or leading a risk programme, go directly to Lead Risk Manager. Many professionals start with Risk Manager and progress to Lead Risk Manager later in their career.
Many professionals arrive at this training having worked with risk
registers and heat maps for years, but without a structured framework
underneath. What the PECB ISO 31000 certification process forces you to
do is justify your methodological choices; why this scope, why these
criteria, why this treatment option. That rigour is what makes the
certification meaningful, and what makes certified professionals
genuinely more effective in regulated environments.
ISO 31000 defines a structured process that includes setting scope and criteria, identifying risks, analyzing and evaluating them, and selecting treatment options, supported by communication and monitoring.
byChristophe MAZZOLA
ISO 31000 supports decision-making by providing a structured way to understand uncertainty, prioritize risks, and select treatment options based on defined criteria.
byGerhard ROTTER
The process includes setting scope, context, and criteria, then identifying risks, analyzing and evaluating them, and selecting treatments. It also includes recording, reporting, and ongoing monitoring and review with communication and consultation.
byMarc BOUVIER
Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.