BCS Foundation Certificate in Information Security Management Principles — Information & Free Practice

About BCS Foundation Certificate in Information Security Management Principles

BCS Foundation Certificate in Information Security Management Principles · GB

Key exam facts

Provider

BCS, The Chartered Institute for IT, owns and awards this certification; BCS offers direct remotely proctored examinations, and Pearson VUE is an alternative examination delivery channel.

Format

Invigilated online examination, closed book, multiple-choice questions.

Exam questions

Total questions: 40.

Time limit

60 minutes of assessment time. Adjustments/additional time may be requested under the BCS reasonable adjustments policy, including English as a second language.

Passing score

65%: 26 correct answers out of 40.

Exam fee

BCS direct exam-only UK price: GBP 200, including GBP 35 remote proctoring; VAT excluded and applied at purchase. International prices vary by region; contact BCS. Course prices vary by provider and format; Pearson VUE bookings are priced through that channel.

Topics covered

• Information security principles (10%)

  • Describe terms and concepts associated with information security management.
  • Explain the need for, and benefits of, information security.
  • Describe the terms and principles associated with personal data privacy legislation and considerations.

• Information risk (15%)

  • Describe the key components of risk management.
  • Explain the processes involved in the risk management lifecycle.

• Information security frameworks (15%)

  • Describe key components of organisational structure and policy in managing information security.
  • Explain the principles of information security governance and information assurance.
  • Describe security standards, procedures and frameworks.

• Security operations (15%)

  • Explain concepts, models and technologies associated with security architecture and operations.
  • Explain threat modelling and common threat modelling frameworks.
  • Explain techniques for identifying, assessing and managing security vulnerabilities.
  • Describe common types of cyberattacks and threats to systems.

• The security lifecycle and DevSecOps (10%)

  • Explain stages and considerations of information security lifecycle management.
  • Describe the key terms, features and benefits of DevSecOps.

• Technical security (15%)

  • Describe key concepts associated with networks and network security.
  • Describe technical strategies and measures to secure IT infrastructure.

• Physical and environmental security (5%)

  • Describe common physical security controls.

• Disaster recovery and digital forensics (10%)

  • Describe activities involved in incident response.
  • Explain terms associated with disaster recovery.
  • Describe the process and principles of digital forensics.

• Emerging and growing technologies (5%)

  • Describe common security concerns associated with emerging and growing technologies.

How to prepare

Work through the topics, read the explanation after each answer, and revisit the areas where you miss questions. Use the official outline and reference materials below to guide your study.

These independent practice questions are not actual exam items and do not guarantee a passing result.

Frequently asked questions

Official sources and references

• BCS CISMP v10.0 syllabus

  p. 27, Question weighting

• BCS CISMP certification

  What format is the exam?

• BCS CISMP certification

  Exam-only fee

• BCS CISMP certification

  Exam pass mark

• BCS CISMP v10.0 syllabus

  p.26, duration

Confirm current exam arrangements with the exam provider.