Start here
Five free questions
See original questions, correct answers, distractor reasoning and sources without creating an account.
Try free questionsPECB exam preparation
ISO 31000 Lead Risk Managerexam preparation
The ISO 31000 Lead Risk Manager exam is a three-hour, open-book PECB certification examination for professionals who design, implement and lead organisation-wide risk management. It contains 80 multiple-choice questions across five weighted competency domains and has a 70% pass mark. Risk assessment is the largest domain, followed by treatment, recording and reporting, with substantial emphasis on evaluation-level decisions.
- Questions
- 80
- Pass mark
- 70%
- Domains
- 5
- Format
- Open book
Choose what you need
Training, free examples and full preparation are separate.
Select the path that matches what you already have. Your Labs purchase unlocks only this exact exam.
Full Aegentra Labs access
$49 + GST for 1 month
Or $99 + GST for 12 months. Complete bank, casual mode, exam mode, saved results and domain feedback.
Choose Labs accessOfficial PECB training
Need the course and exam pathway?
Buy official course materials and the applicable examination pathway separately through Aegentra Academy.
View the official courseAeges AI · Learning Intelligence
Results analysed with Aeges AI
Complete a ISO 31000 Lead Risk Manager practice session, then use Aeges AI learning intelligence to understand how your submitted answers performed across the qualification. For this exam, the analysis distinguishes framework leadership, risk assessment, treatment, reporting, monitoring and consultation signals.
See how Aeges AI works- Competency map
- 5 domains
- Learning signal
- Relative strength and gap
- Next decision
- Revision priority
Written by Harry Sidhu, ISO 27001 Lead Implementer · Director and Principal Consultant, Aegentra. Facts are checked against the published sources listed below.
Published exam facts
What is on the ISO 31000 Lead Risk Manager exam?
These facts come from PECB’s published documents. Where PECB does not publish a detail, this page says so instead of repeating an unsupported figure.
- Questions
- 80
- Pass mark
- 70%
- Duration
- 180 minutes
Stand-alone and scenario-based multiple choice.
Equivalent to 56 correct answers from 80 questions.
Open-book materials
What you may bring- ISO standardA hard copy of the ISO 31000 standard
- Course materialsTraining course materials, through the PECB Exams app and/or printed
- Personal notesPersonal notes taken during the training course, through the PECB Exams app and/or printed
Retakes: Partner-delivered training includes the first attempt and one free retake within 12 months. PECB waiting periods and other examination rules still apply.
Your revision map
How is the exam weighted across domains?
The published handbook allocates all 80 questions across 5 competency domains. The simulation below follows that allocation.
- Domain 115%12 questions
Fundamental principles and concepts of risk management
Applicable frameworks, risk terminology, benefits, risk types, principles and the relationship between the ISO 31000 principles, framework and process.
- Domain 217.5%14 questions
Establishment of the risk management framework
Leadership, integration, design, context, policy, resources, implementation, evaluation and improvement of an organisation-wide framework.
- Domain 331.25%25 questions
Initiation of the risk management process and risk assessment
Scope, context, criteria, objectives, risk identification, analysis, evaluation, prioritisation and selection of appropriate assessment techniques.
- Domain 420%16 questions
Risk treatment, risk recording and reporting
Treatment selection and plans, acceptance criteria, residual risk, risk registers, record protection and reporting across project, programme and corporate levels.
- Domain 516.25%13 questions
Risk monitoring, review, communication and consultation
Measurement objectives, KPIs, KRIs, dashboards, monitoring effectiveness, stakeholder communication, consultation frequency and risk escalation.
Question structure
What kinds of questions are asked?
Expect a mix of direct knowledge checks and applied scenarios. The emphasis is on choosing the action a competent lead risk manager would take.
- Stand-alone multiple choice
- Independent questions have three options: one keyed response and two plausible distractors. They test concepts, responsibilities, evidence and professional judgement.
- Scenario-based multiple choice
- A written organisational scenario supports related questions that require candidates to analyse evidence, identify weaknesses and choose the most appropriate next action.
- Evaluation-level decisions
- Higher-weighted domains ask candidates to compare reasonable alternatives and select the action that best achieves the intended outcome, not merely recall a definition.
Study strategy
How should you sequence your study?
Lead-level preparation should connect enterprise governance with detailed assessment. Domain 3 is the largest, but its decisions depend on a credible framework, treatment governance and useful monitoring.
- Anchor risk in objectives. Start every assessment by defining the decision, scope, context, stakeholders and success criteria.
- Design an integrated framework. Connect governance, planning, performance, culture, resources and reporting rather than building a parallel risk bureaucracy.
- Vary assessment techniques. Choose methods that fit uncertainty, available data, decision timing and the consequences being assessed.
- Make treatment decisions explicit. Record options, trade-offs, ownership, cost, residual risk and the authority accepting what remains.
- Build leading monitoring. Use KRIs, thresholds, change triggers and consultation to identify movement before loss or failure occurs.
Where do candidates actually lose marks?
Lead questions commonly include several reasonable controls. The best answer strengthens decision quality, accountability and integration rather than merely adding process.
- Treating risk as only negative. ISO 31000 defines risk as the effect of uncertainty on objectives, which can include opportunity.
- Using a matrix without criteria. Scores are not comparable until consequence, likelihood and acceptance criteria are defined.
- Skipping consultation. Stakeholders provide context, assumptions and consequence information that the risk team may not hold.
- Equating a register with management. A register records decisions; it does not replace ownership, treatment, monitoring or review.
Candidate questions
ISO 31000 Lead Risk Manager exam FAQs
Direct answers about time, materials, retakes, credentials and the knowledge expected before exam day.
How many questions are in the ISO 31000 Lead Risk Manager exam?
The current English multiple-choice examination contains 80 questions. Aegentra Labs follows the published competency-domain allocation when building the full simulation, so the practice result reflects the structure of the examination rather than an arbitrary mix of topics.
How long is the ISO 31000 Lead Risk Manager exam?
The published examination duration is three hours. Candidates should reserve time to read scenario material, review flagged questions and complete a final check rather than budgeting every minute only for the first pass.
Is the ISO 31000 Lead Risk Manager exam open book?
Yes. The current English examination is open book, but permitted materials are limited to the main reference standard or framework, PECB training material and personal course notes. Internet searching and unrestricted reference material are not permitted.
What score is required to pass the ISO 31000 Lead Risk Manager exam?
The published pass mark is 70%. Aegentra Labs recommends consistently scoring above that threshold across every domain, because a strong total can conceal a weak competency area that remains important in professional practice.
What credential follows the ISO 31000 Lead Risk Manager exam?
Passing allows an application for the appropriate PECB ISO 31000 Lead Risk Manager credential tier. Passing the examination satisfies the exam requirement, but professional certification levels may also require relevant work, project or audit experience and acceptance of the PECB Code of Ethics.