Start here
Five free questions
See original questions, correct answers, distractor reasoning and sources without creating an account.
Try free questionsPECB exam preparation
ISO 31000 Risk Managerexam preparation
The ISO 31000 Risk Manager exam is an open-book PECB certification examination for professionals applying risk management principles, frameworks and processes. It contains 60 multiple-choice questions across three weighted competency domains and has a 70% pass mark. More than half of the examination assesses implementation of the risk management process, including assessment, treatment, monitoring, reporting and consultation.
- Questions
- 60
- Pass mark
- 70%
- Domains
- 3
- Format
- Open book
Choose what you need
Training, free examples and full preparation are separate.
Select the path that matches what you already have. Your Labs purchase unlocks only this exact exam.
Full Aegentra Labs access
$49 + GST for 1 month
Or $99 + GST for 12 months. Complete bank, casual mode, exam mode, saved results and domain feedback.
Choose Labs accessOfficial PECB training
Need the course and exam pathway?
Buy official course materials and the applicable examination pathway separately through Aegentra Academy.
View the official courseAeges AI · Learning Intelligence
Results analysed with Aeges AI
Complete a ISO 31000 Risk Manager practice session, then use Aeges AI learning intelligence to understand how your submitted answers performed across the qualification. For this exam, the analysis separates risk principles, framework design and the practical decisions inside the risk-management process.
See how Aeges AI works- Competency map
- 3 domains
- Learning signal
- Relative strength and gap
- Next decision
- Revision priority
Written by Harry Sidhu, ISO 27001 Lead Implementer · Director and Principal Consultant, Aegentra. Facts are checked against the published sources listed below.
Published exam facts
What is on the ISO 31000 Risk Manager exam?
These facts come from PECB’s published documents. Where PECB does not publish a detail, this page says so instead of repeating an unsupported figure.
- Questions
- 60
- Pass mark
- 70%
- Duration
- 120 minutes
Stand-alone and scenario-based multiple choice.
Equivalent to 42 correct answers from 60 questions.
Open-book materials
What you may bring- ISO standardA hard copy of the ISO 31000 standard
- Course materialsTraining course materials, through the PECB Exams app and/or printed
- Personal notesPersonal notes taken during the training course, through the PECB Exams app and/or printed
Retakes: Partner-delivered training includes the first attempt and one free retake within 12 months. PECB waiting periods and other examination rules still apply.
Your revision map
How is the exam weighted across domains?
The published handbook allocates all 60 questions across 3 competency domains. The simulation below follows that allocation.
- Domain 120%12 questions
Fundamental principles and concepts of risk management
Risk terminology, purpose, principles, regulatory and standards context, risk types and the relationship between principles, framework and process.
- Domain 223.33%14 questions
Establishment of a risk management framework
Leadership, integration, roles, internal and external context, resources, policy, plans, implementation, evaluation and improvement of the framework.
- Domain 356.67%34 questions
Implementation of a risk management process
Scope, context and criteria, identification, analysis, evaluation, treatment, recording, reporting, monitoring, review, communication, consultation, KPIs, KRIs and escalation.
Question structure
What kinds of questions are asked?
Expect a mix of direct knowledge checks and applied scenarios. The emphasis is on choosing the action a competent risk manager would take.
- Stand-alone multiple choice
- Independent questions have three options: one keyed response and two plausible distractors. They test concepts, responsibilities, evidence and professional judgement.
- Scenario-based multiple choice
- A written organisational scenario supports related questions that require candidates to analyse evidence, identify weaknesses and choose the most appropriate next action.
- Evaluation-level decisions
- Higher-weighted domains ask candidates to compare reasonable alternatives and select the action that best achieves the intended outcome, not merely recall a definition.
Study strategy
How should you sequence your study?
More than half of the examination tests implementation of the risk management process. Build practical fluency: define the decision, assess uncertainty, choose treatment and show how the decision will be monitored and communicated.
- Start with purpose and principles. Understand how risk management creates and protects value and why the principles shape decisions.
- Separate framework and process. The framework enables and integrates risk management; the process is applied to decisions and uncertainty.
- Design the framework around the organisation. Use governance, roles, culture, resources and reporting that fit the real context rather than importing a generic model.
- Complete repeated assessments. Practise identification, analysis and evaluation across strategic, project, operational and third-party scenarios.
- Close the decision loop. Record treatment, residual risk, acceptance, indicators, review triggers and escalation routes.
Where do candidates actually lose marks?
Manager-level questions reward decisions that are proportionate, owned and connected to objectives. A technically correct tool can still be the wrong next action.
- Treating risk as only negative. ISO 31000 defines risk as the effect of uncertainty on objectives, which can include opportunity.
- Using a matrix without criteria. Scores are not comparable until consequence, likelihood and acceptance criteria are defined.
- Skipping consultation. Stakeholders provide context, assumptions and consequence information that the risk team may not hold.
- Equating a register with management. A register records decisions; it does not replace ownership, treatment, monitoring or review.
Candidate questions
ISO 31000 Risk Manager exam FAQs
Direct answers about time, materials, retakes, credentials and the knowledge expected before exam day.
How many questions are in the ISO 31000 Risk Manager exam?
The current English multiple-choice examination contains 60 questions. Aegentra Labs follows the published competency-domain allocation when building the full simulation, so the practice result reflects the structure of the examination rather than an arbitrary mix of topics.
How long is the ISO 31000 Risk Manager exam?
The published examination duration is two hours. Candidates should reserve time to read scenario material, review flagged questions and complete a final check rather than budgeting every minute only for the first pass.
Is the ISO 31000 Risk Manager exam open book?
Yes. The current English examination is open book, but permitted materials are limited to the main reference standard or framework, PECB training material and personal course notes. Internet searching and unrestricted reference material are not permitted.
What score is required to pass the ISO 31000 Risk Manager exam?
The published pass mark is 70%. Aegentra Labs recommends consistently scoring above that threshold across every domain, because a strong total can conceal a weak competency area that remains important in professional practice.
What credential follows the ISO 31000 Risk Manager exam?
Passing allows an application for the appropriate PECB ISO 31000 Risk Manager credential tier. Passing the examination satisfies the exam requirement, but professional certification levels may also require relevant work, project or audit experience and acceptance of the PECB Code of Ethics.