Start here
Five free questions
See original questions, correct answers, distractor reasoning and sources without creating an account.
Try free questionsPECB exam preparation
ISO 31000 Foundationexam preparation
The ISO 31000 Foundation exam is a one-hour, closed-book PECB examination for candidates learning the principles, framework and process of risk management. It contains 40 multiple-choice questions across two weighted competency domains and has a 70% pass mark. Twenty-five questions assess the risk management framework and process, while fifteen assess fundamental principles and concepts.
- Questions
- 40
- Pass mark
- 70%
- Domains
- 2
- Format
- Closed book
Choose what you need
Training, free examples and full preparation are separate.
Select the path that matches what you already have. Your Labs purchase unlocks only this exact exam.
Full Aegentra Labs access
$49 + GST for 1 month
Or $99 + GST for 12 months. Complete bank, casual mode, exam mode, saved results and domain feedback.
Choose Labs accessOfficial PECB training
Need the course and exam pathway?
Buy official course materials and the applicable examination pathway separately through Aegentra Academy.
View the official courseAeges AI · Learning Intelligence
Results analysed with Aeges AI
Complete a ISO 31000 Foundation practice session, then use Aeges AI learning intelligence to understand how your submitted answers performed across the qualification. For this exam, the analysis distinguishes risk-management principles from the framework and process used to put them into practice.
See how Aeges AI works- Competency map
- 2 domains
- Learning signal
- Relative strength and gap
- Next decision
- Revision priority
Written by Harry Sidhu, ISO 27001 Lead Implementer · Director and Principal Consultant, Aegentra. Facts are checked against the published sources listed below.
Published exam facts
What is on the ISO 31000 Foundation exam?
These facts come from PECB’s published documents. Where PECB does not publish a detail, this page says so instead of repeating an unsupported figure.
- Questions
- 40
- Pass mark
- 70%
- Duration
- 60 minutes
Stand-alone and scenario-based multiple choice.
Equivalent to 28 correct answers from 40 questions.
Exam conditions
Closed bookNo reference materials are permitted. Prepare the core terminology, relationships and process sequence before the examination rather than relying on a reference index.
Retakes: Partner-delivered training includes the first attempt and one free retake within 12 months, subject to PECB examination rules.
Your revision map
How is the exam weighted across domains?
The published handbook allocates all 40 questions across 2 competency domains. The simulation below follows that allocation.
- Domain 137.5%15 questions
Fundamental principles and concepts of risk management
Purpose and benefits of risk management, ISO 31000 scope, value creation and protection, terminology, principles, risk types and related standards.
- Domain 262.5%25 questions
Risk management framework and risk management process
Leadership, integration, design, implementation, evaluation and improvement of the framework; scope, context, criteria, assessment, treatment, recording, reporting, monitoring and consultation.
Question structure
What kinds of questions are asked?
Expect a mix of direct knowledge checks and applied scenarios. The emphasis is on choosing the action a competent foundation would take.
- Stand-alone multiple choice
- Independent three-option questions test terminology, purpose, relationships and the ability to recognise a sound management-system or risk-management practice.
- Short applied scenarios
- A concise organisational situation asks the candidate to select the response that best follows the standard, framework or published competency statement.
Study strategy
How should you sequence your study?
Study the three connected ideas—principles, framework and process—in that order. The second domain is larger, but it makes little sense until the purpose and principles are secure.
- Start with purpose and principles. Understand how risk management creates and protects value and why the principles shape decisions.
- Separate framework and process. The framework enables and integrates risk management; the process is applied to decisions and uncertainty.
- Map the complete process. Connect scope, context, criteria, assessment, treatment, monitoring, recording, reporting, communication and consultation.
- Practise treatment choices. Distinguish avoiding, taking, removing a source, changing likelihood or consequence, sharing and retaining risk.
- Use one worked example. Carry one strategic or operational decision through the full process and record every assumption.
Where do candidates actually lose marks?
Candidates usually lose marks by applying familiar risk tools without first checking the decision context and ISO 31000 terminology.
- Treating risk as only negative. ISO 31000 defines risk as the effect of uncertainty on objectives, which can include opportunity.
- Using a matrix without criteria. Scores are not comparable until consequence, likelihood and acceptance criteria are defined.
- Skipping consultation. Stakeholders provide context, assumptions and consequence information that the risk team may not hold.
- Equating a register with management. A register records decisions; it does not replace ownership, treatment, monitoring or review.
Candidate questions
ISO 31000 Foundation exam FAQs
Direct answers about time, materials, retakes, credentials and the knowledge expected before exam day.
How many questions are in the ISO 31000 Foundation exam?
The current English multiple-choice examination contains 40 questions. Aegentra Labs follows the published competency-domain allocation when building the full simulation, so the practice result reflects the structure of the examination rather than an arbitrary mix of topics.
How long is the ISO 31000 Foundation exam?
The published examination duration is 60 minutes. Candidates should reserve time to read scenario material, review flagged questions and complete a final check rather than budgeting every minute only for the first pass.
Is the ISO 31000 Foundation exam open book?
No. The current English Foundation examination is closed book. Candidates cannot use the standard, training material, personal notes or internet resources during the examination, so core concepts and relationships need to be understood before the session.
What score is required to pass the ISO 31000 Foundation exam?
The published pass mark is 70%. Aegentra Labs recommends consistently scoring above that threshold across every domain, because a strong total can conceal a weak competency area that remains important in professional practice.
What credential follows the ISO 31000 Foundation exam?
After passing, candidates can apply for the PECB Certificate Holder in ISO 31000 Foundation designation. Passing the examination satisfies the exam requirement, but professional certification levels may also require relevant work, project or audit experience and acceptance of the PECB Code of Ethics.