Adaptive
The weakest clause comes back first
Adaptive spaced repetition schedules every question against your weakest control. Mastered clauses fade out so you stop wasting evenings on what you already know cold.
ISO 31000 Risk Manager exam · format, timing, pass mark
You run risk every day.
The exam tests the framework.
You have managed risk in real organisations for years. You know what a risk owner does, how a treatment plan lands, how a KRI behaves. The Risk Manager exam asks you to name which step of the ISO 31000 process you just described, in which layer of the standard. Mindset Prep is where you bridge practice and framework, whichever certification body you are sitting with.
PECB format
60 multiple-choice
questions
questions
2 hrs Time
limit
limit
70% Pass
mark
mark
Open Book
Open-book = a printed copy of the standard plus your course material. No personal notes.
- Aligned with PECB, Exemplar Global, TRECCERT, BSI
- PECB format 60 multiple-choice questions, 2 hours, open book, 70% pass
- Other providers Format varies; content is identical
- Re-sit cost Up to $1,000 AUD - you do not want it
- Source clauses ISO 31000:2018, ISO 31073:2022 vocabulary, IEC 31010:2019 techniques
How we close the gap
Active retrieval, not passive review.
Re-reading the standard is not what failed you last time. Active recall under realistic conditions is what the exam tests, and what actually fixes the trap patterns.
Mock exam
Exam mechanics, no surprise on the day
Mocks with question palette, mark-for-review, and weighted scoring that mirror what every major Lead Auditor / Implementer exam puts in front of you. Identity stays Mindset, mechanics mirror the real thing so exam day feels familiar.
Coach
Plain English, cited clause, no hallucination
Every option - correct AND wrong - comes with a plain-language rationale and the exact ISO clause it draws on. You learn the bad answer too: which trap pattern examiners used to bait it, and how to spot the same swap next time. Clause cited inline so you can verify against the standard.
The three traps that will catch you
You will see these on exam day. Probably twice.
Every wrong answer in our bank is tagged with the exact trap pattern examiners reuse. You see each one dozens of times, in dozens of variations, until they stop sliding past you.
T-01
Which step of the process
Nearly a quarter of Risk Manager questions hinge on a single distinction: was that risk identification, risk analysis, risk evaluation, or risk treatment? In daily work the steps blur. The exam asks you to name them precisely. Mindset Prep drills the process-step pivot until each one is unmistakable.
T-02
Principle vs framework vs process
Clause 4 is principles. Clause 5 is framework. Clause 6 is process. Wrong options regularly move a principle into the framework layer or a framework activity into the process layer. Senior risk practitioners miss it because they think in actions, not layers. The bank trains you to spot the layer first, then the answer.
T-03
Risk vs consequence vs likelihood
ISO 31073 defines risk as the effect of uncertainty on objectives. Candidates routinely confuse risk with its components - the event, the likelihood, the consequence. Wrong options exploit the slip. Mindset Prep surfaces the vocabulary-precision questions until your eye stops sliding past them.
The questions candidates actually ask
Honest answers.
I have been doing risk management for years. Do I really need to study?
Yes - practitioners often score lower than expected on this exam because the questions test the standard, not the practice. You know how to manage risk; the exam asks where each activity lives in ISO 31000's three-layer structure. Mindset Prep closes that gap quickly because your domain knowledge accelerates pattern recognition once the layers are clear.
Which certification body does Mindset Prep cover?
All of the major ones - though ISO 31000 credentialing is more fragmented than the 27001 or 42001 schemes. PECB issues 'Risk Manager' and 'Lead Risk Manager' credentials (the most common pathway, 60 multiple-choice questions, 2 hours, open book). Exemplar Global has its own 'Risk Manager (ISO 31000)' credential. TRECCERT issues an 'ISO 31000 Practitioner' credential. BSI's training arm runs the CRiSP Certified Risk Professional course. CQI/IRCA offers risk-management training (Introduction to Risk Management, Leading Enterprise Risk Management) but not a specifically branded ISO 31000 credential. Mindset Prep is grounded in ISO 31000:2018 itself, so the standard knowledge is identical regardless of which body certifies you.
Is ISO 31000 auditable?
No - ISO 31000 is guidance, not a requirements standard. There is no Annex A and no controls. You cannot be certified against ISO 31000 the way you can be certified against ISO 27001. The Risk Manager credential certifies the practitioner, not the organisation. We mention this because wrong options on the real exam routinely exploit the misconception.
I am sitting in 4 weeks. Is that enough time?
Yes - Risk Manager is a 3-day course followed by a 60-question, 2-hour, open-book multiple-choice exam. Per the PECB candidate handbook, roughly 57% of the exam is on implementing the risk management framework (Clause 6 process), so the adaptive engine front-loads process-step practice in week one and tapers to full-length mocks in the final week. Most candidates report 20-30 minutes a day is enough.
How do I know I am actually ready?
Your Readiness Score on the dashboard shows you - calibrated against what the exam actually tests, not against feel. When it is consistently green across every section of the exam outline, you sit the exam.
Need the course + exam too?
The official course - from our parent brand.
Mindset Prep is the study system you stack on top of the official course. The accredited ISO 31000 Risk Manager course (with exam voucher bundled) is sold by Mindset Cyber - an Australian training company that has been teaching Lead Auditors and Lead Implementers since 2023.
From Mindset Cyber - ISO 27001 & 42001 training since 2023
PECB Certified ISO 31000 Risk Manager
Master the ISO 31000:2018 risk management framework and process across the full lifecycle. Establish risk context, identify, analyse, evaluate and treat risks, and design a risk management framework that integrates with organisational governance - then sit the PECB Risk Manager exam with two attempts included.
$849 AUD
Excludes GST. Two exam attempts bundled - no extra exam fees.
Course includes
- Two remote-proctored exam attempts (free re-sit within 12 months)
- 12 months myPECB eLearning access
- Training material covering ISO 31000:2018 + ISO 31073 + IEC 31010
- Risk-scenario worked examples and exercises
- 21 CPD credits on completion
- PECB ISO 31000 Risk Manager credential on pass
View ISO 31000 RM course on Mindset Cyber →
Opens in a new tab on mindsetcyber.com.au
Free by email
Not ready to start the trial?
Get a set of free ISO 31000 Risk Manager practice questions by email - written from the standard, with the cited clause on every answer - and warm up before you commit.
Try it for three days.
No re-sit anxiety, no PDF dumps. Card on file, auto-charge day 4, cancel any time from inside the app.
Start 3-day free trial