Select Page

Governance, Risk, & Compliance

Governance, Risk, and Compliance (GRC) helps organizations achieve their goals while following ethical, legal, and regulatory standards. It ensures accountability, manages risks continually, and fosters a culture of compliance, reducing legal issues and building stakeholder trust

 

 

PECB's Governance, Risk, & Compliance Training Portfolio

Take a glimpse at the training courses featured under GRC portfolio

 

ISO 31000

Develop the skills to support an organization in implementing and maintaining an ISMS based on ISO/IEC 2700

ISO 31000 Foundation

Gain knowledge on the main components of ISO 31000, its principles, and approaches to managing risks

ISO 31000 Risk Manager

Acquire the skills and knowledge to implement risk management process and framework in an organization in accordance with the guidelines set out in ISO 31000

ISO 31000 Lead Risk Manager

Develop the competence to successfully implement a risk management process and framework based on ISO 31000 and apply risk management principles aligned with the standard

 

ISO/IEC 38500

The ISO/IEC 38500 certification is a credential that signifies expertise in corporate governance of information technology, providing guidelines for effective IT management and usage within organizations. Embarking on the ISO/IEC 38500 certification process involves gaining an in-depth understanding of the principles and best practices for IT governance. This certification journey covers key areas such as establishing a framework for effective IT governance, aligning IT with organizational goals, ensuring IT investments are wise and deliver value, and managing IT-related risks and compliance.

ISO/IEC 38500 Foundation

Gain knowledge on the best industry practices of IT governance and its key principles

ISO/IEC 38500 IT Corporate Governance Manager

Gain a thorough understanding of the core rinciples for good IT governance based on ISO/IEC 38500 and the implementation of an effective framework

ISO/IEC 38500 Lead IT Corporate Governance Manager

Develop the skills and knowledge to successfully evaluate, implement, and monitor an IT governance model by following the guidelines of ISO/IEC 38500

ISO 37000 Corporate Governance

The ISO 37000 standard provides guidance on corporate governance, enabling organizations to establish, develop, evaluate, and maintain effective governance practices. The ISO 37000 certification is a professional credential that validates your expertise in applying governance principles aligned with this international standard. It equips you with the knowledge to promote ethical leadership, ensure accountability, and drive sustainable performance. By achieving this certification, you demonstrate your capacity to support organizations in integrating good governance practices into their operations, decision[1]making processes, and overall strategy, fostering transparency and stakeholder trust

ISO 37000 Corporate Governance Manager

Obtain the necessary competencies to assist organizations in establishing, maintaining, and improving good governance based on ISO 37000

ISO 37000 Lead Corporate Governance Manager

Obtain the necessary competence to establish, maintain, and improve good governance in organizations based on ISO 37000

ISO 37001 Anti-Bribery Management System

ISO 37001 is a globally recognized standard that demonstrates an organization’s commitment to implementing an effective anti-bribery management system (ABMS). Achieving ISO 37001 certification involves a comprehensive process of understanding and applying the standard for establishing, maintaining, and improving an ABMS. This certification journey includes learning about the principles and practices of bribery risk assessment, due diligence procedures, financial and non-financial controls, and implementing policies and procedures to combat bribery.

ISO 37001 Foundation

Gain knowledge on the concepts and principles of an ABMS based on ISO 37001 and the structure and components of the standard

ISO 37001 Lead Implementer

Become competent in successfully implementing and managing an ABMS based on ISO 37001

ISO 37001 Lead Auditor

Develop the skills and expertise to audit an ABMS against the requirements of ISO 37001 and other audit best practices

ISO 37001:2025 Transition

Understand the differences between ISO 37001:2016 and ISO 37001:2025 and acquire the knowledge needed to align an ABMS with the updated standard

ISO 37301 Compliance Management System

ISO 37301 is a certification for compliance management systems, providing guidelines to help organizations establish, develop, evaluate, and maintain an effective compliance management system. Achieving an ISO 37301 certification involves a systematic approach to understand and implement compliance standards within your organization. It begins with a thorough assessment of your existing compliance processes, identifying areas that need alignment with the ISO 37301 standard.

ISO 37301 Foundation

Understand the basic concepts of compliance and the requirements of ISO 37301 for a compliance management system (CMS)

ISO 37301 Lead Implementer

Develop the competence necessary for the establishment, implementation, maintenance, and continual improvement of a compliance management system based on ISO 37301

ISO 37301 Lead Auditor

Acquire the skills and knowledge necessary to conduct audits of compliance management systems based on ISO 37301 and the guidelines for auditing management systems provided in ISO 19011 and the certification process presented in ISO/IEC 17021-1

Management Systems Internal Auditor

The CMSIA (Certified Management Systems Internal Auditor) certification is a professional accreditation that validates expertise in managing and conducting internal audits within organizations. Embarking on the CMSIA certification journey involves gaining a comprehensive understanding of the principles and practices of internal auditing. This certification process covers key areas such as audit planning and execution, risk assessment, compliance checks, report writing, and communication skills.

Certified Management Systems Internal Auditor

Develop the necessary skills to plan and conduct management systems internal audits

Certified Management Systems Consultant (CMSC)

The Management Systems Consultant Certification (CMSC) validates your expertise in consulting and supporting organizations to establish, optimize, and sustain effective management systems. Rooted in proven principles, this certification demonstrates your mastery of industry-leading methodologies and your commitment to elevating the quality of consultancy services. It proves that you possess the necessary expertise to guide organizations through the complexities of implementing and maintaining management systems, highlighting your proficiency to deliver strategic and effective solutions tailored to organizational needs

Management Systems Consultant Foundation

Become familiar with and gain an understanding of the basic theoretical and practical concepts of management systems consultancy

Certified Management Systems Consultant

Develop the skills and gain the necessary knowledge to interpret and implement management system consultancy practices

ISO/TS 31050 Emerging Risks

ISO/TS 31050 is a forward-looking guidance standard focused on the identification, assessment, and management of emerging risks in a rapidly evolving global environment. The ISO/TS 31050 certification process equips professionals with the knowledge and competencies needed to anticipate future threats, evaluate complex and interconnected risks, and support organizations in building resilience. This certification involves learning how to apply emerging risk principles, develop structured risk-forecasting approaches, and integrate these practices into organizational decision-making to ensure preparedness in uncertain and dynamic contexts.

ISO/TS 31050 Emerging Risk Manager

Obtain the necessary competencies to support organizations in identifying, analyzing, and understanding emerging risks based on ISO/TS 31050

Why Choose a Career in Governance, Risk, & Compliance GRC?

Rapidly Evolving Field- Essential Roles in Modern Business - Diverse and Impactful Career Paths

High-Paying Careers in Governance, Risk, & Compliance GRC?

Chief Risk Officer (CRO)
Responsible for overseeing the organization’s risk management strategies, identifying potential risks, and ensuring compliance with laws and regulations.
Annual Average Salary: U.S. $260,000

Risk Management Director
Directs risk management policies and programs, identifying and analyzing risks that could impact the organization.
Annual Average Salary: U.S. $170,000

GRC Program Manager
Manages the overall governance, risk, and compliance program, coordinating across different departments to ensure alignment with strategic goals.
Annual Average Salary: U.S. $150,000

IT Governance, Risk, and Compliance Manager
Specializes in managing GRC issues related to information technology, including cybersecurity risks and IT governance frameworks.
Annual Average Salary: U.S. $155,000

Compliance Officer
Oversees the compliance function, ensuring the organization adheres to legal standards and internal policies.
Annual Average Salary: U.S. $125,000

 

Note: The salary data presented here have been sourced from Glassdoor and may be subject to change over time due to various factors.

PECB Information Security & Cybersecurity Training Courses

Professional Development Pathways

Training Course Levels and Durations

Course TypeLevelWho Should AttendDuration
Management System Training CoursesFoundationIndividuals who wish to learn the basics of implementing a management system and its processes2 DAYS
Lead ImplementerIndividuals responsible for the implementation and management of a management system within their organization5 DAYS
Lead AuditorIndividuals responsible for auditing and monitoring management systems5 DAYS
Manager Training CoursesFoundationIndividuals who wish to study the fundamentals of the processes and procedures in the related field or standard2 DAYS
Manager / OfficerManagers in the relevant field who wish to develop the skills and knowledge to carry out and implement processes, approaches, and techniques for different programs, plans, strategies, etc.3 DAYS
Lead Manager / OfficerManagers in the relevant field who wish to assess, manage, or maintain plans, assessments, frameworks, programs, or the like, and develop their management expertise5 DAYS
Non-ISO Training CoursesFoundationIndividuals who wish to study the foundations of the associated field and its related processes2 DAYS
Manager / OfficerManagers in the relevant field who wish to gain knowledge on the fundamental principles and concepts of a management program3 DAYS
Lead Manager / Officer / Professional and AnalystManagers in the relevant field who wish to develop their skills and knowledge in the associated field and improve their management expertise5 DAYS
Technical Cybersecurity CoursesOffensive SecurityProfessionals wishing to learn more about the tactics and techniques malicious hackers use and improve their capacity to protect their systems5 DAYS
Defensive SecurityIndividuals wishing to significantly improve their defensive capabilities and learn best practices for hardening systems and configuring security effectively5 DAYS
ForensicsProfessionals who wish to learn a wide range of skills and knowledge crucial for digital forensics5 DAYS

Certification Criteria

Designation, Experience, and Project Requirements

Exam LevelDesignationProfessional ExperienceAudit ExperienceProject Experience
FoundationFoundation---
Provisional Manager---
Manager2 years (1 in the specialized field)-200 hours
Lead Manager5 years (2 in the specialized field)-300 hours
Senior Lead Manager10 years (7 in the specialized field)-1000 hours
Lead AuditorProvisional Auditor---
Auditor2 years (1 in the specialized field)200 hours-
Lead Auditor5 years (2 in the specialized field)300 hours-
Senior Lead Auditor10 years (7 in the specialized field)1000 hours-
Lead ImplementerProvisional Implementer---
Implementer2 years (1 in the specialized field)-200 hours
Lead Implementer5 years (2 in the specialized field)-300 hours
Senior Lead Implementer10 years (7 in the specialized field)-1000 hours
MasterMaster (Lead Auditor & Lead Implementer)20 years (10 in a leadership role in the specialized field)10,000 hours combination of auditing and project activities
📌 Note: For the ANAB Accredited Foundation Certificate Programs, attending the corresponding training course is a mandatory requirement.

PECB Training Course Delivery Formats

Diverse learning delivery methods catering to a wide range of learners, ensuring accessibility, flexibility, and quality.

Classroom

Engage in direct, interactive sessions with PECB Certified Trainers in a structured, face-to-face learning environment, ideal for hands-on knowledge application.

Virtual Classroom

Experience engaging, interactive training led by PECB Certified Trainers in a virtual classroom, accessible to all, including those with time constraints or travel limitations.

eLearning

Flexible, location-independent courses via pre-recorded videos. Offers quizzes and additional reading materials.

Self-Study

Self-paced learning with access to course materials. Best for those with prior knowledge and no need for guided teaching.