BCS Practitioner Certificate in Information Risk Management — Requirements & Free Practice
US · License preparation
100 free questions · Answer explanations · No signup required
Loading selected examination banks…
Choose what to practice
Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements
Licenses, application pathways and examination requirements
Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.
BCS Practitioner Certificate in Information Risk Management
BCS practitioner certificate covering information risk management concepts, approaches and techniques, assessed through a scenario-based online examination.
Licensing authority: BCS
Initial by examination
- Adjustments
- Additional time or adjustments may be requested under BCS policy for disability or other special considerations, including English as a second language.
- Applicability
- Current BCS page adopts syllabus v7.1. No exact official start or retirement date is published in the obtained materials, and no applicable retirement announcement was found in targeted official searches. The requested booking window remains subject to BCS scheduling.
- Assessment
- One scenario-based online examination, 90 minutes, supervised, closed book, pass mark 39/60 (65%). The learning objectives involving reports and presentations are assessed knowledge/application scope, not evidence of a separate oral, written assignment or live presentation assessment.
- Booking
- Self-study candidates call BCS on +44 (0)1793 417417 and sit directly with BCS. The invigilated digital examination is accessible only at the registered date and time. International prices must be checked with BCS; no particular future seat, unrestricted on-demand start, Pearson VUE availability for this specific examination, or additional account requirement is inferred.
- Eligibility
- No formal entry requirements; an understanding of information assurance and a good standard of written English are needed. Familiarity with relevant law is advantageous.
- Preparation
- Accredited training is recommended, with classroom courses normally lasting five days; self-study followed by the same examination is expressly available. Training and self-study are preparation alternatives, not separate examination leaves or additional mandatory qualifications.
BCS Practitioner Certificate in Information Risk Management
- Provider
- BCS
- Format
- Invigilated scenario-based online examination; digital format only; closed book. Published types include multiple choice, multiple response, fill in the blanks, ordering and matching.
- Time limit
- 90 minutes
- Passing score
- 39/60 (65%)
- Exam fee
- UK £230 including £35 remote proctoring fee, excluding VAT; international pricing varies by region and must be checked with BCS.
Examination outline
The concepts and framework of information risk management (5%)
- Explain the need for information risk management
- Explain the context of risk in organisations
Information risk management fundamentals (10%)
- Explain the fundamentals of information security
- Explain information risk management standards and good practice guides
- Explain the process of information risk management
- Explain information risk terms and definitions
Establishing an information risk management programme (12%)
- Understand the requirements of an information risk management programme
- Explain the development of a strategic approach to information risk management
- Explain the principles of information classification
Risk identification (21%)
- Describe the process to identify information assets
- Conduct a business impact analysis
- Conduct a threat and vulnerability assessment
Risk assessment (21%)
- Undertake a risk analysis
- Conduct risk evaluation
Risk treatment (19%)
- Explain risk treatment options, controls and processes
- Explain the use of a risk treatment plan
Monitor and review (6%)
- Explain information risk monitoring
- Undertake an information risk review
Presenting risks and business case (6%)
- Report and present the progress of a risk management programme
- Present a business case
Examination sources
- BCS current certificate page
What will I learn? latest syllabus link to /media/1925/infosec-irm-syllabus.pdf
- BCS Information Risk Management syllabus v7.1
PDF p.1, syllabus version
- BCS Information Risk Management syllabus v7.1
PDF p.7, section 1 and objectives 1.1–1.2
- BCS Information Risk Management syllabus v7.1
PDF pp.8–10, section 2 and objectives 2.1–2.4
- BCS Information Risk Management syllabus v7.1
PDF pp.10–11, section 3 and objectives 3.1–3.3
- BCS Information Risk Management syllabus v7.1
PDF pp.12–13, section 4 and objectives 4.1–4.3
- BCS Information Risk Management syllabus v7.1
PDF pp.13–14, section 5 and objectives 5.1–5.2
- BCS Information Risk Management syllabus v7.1
PDF pp.14–15, section 6 and objectives 6.1–6.2
- BCS Information Risk Management syllabus v7.1
PDF pp.15–16, section 7 and objectives 7.1–7.2
- BCS Information Risk Management syllabus v7.1
PDF pp.16–17, section 8 and objectives 8.1–8.2
- BCS Information Risk Management syllabus v7.1
PDF p.18, Question Weighting, explanatory text, eight-area table and diagram
- BCS Information Risk Management syllabus v7.1
PDF p.18, Question types column
- BCS Information Risk Management syllabus v7.1
PDF p.17, Examination Format, format table
- BCS current certificate page
What format is the exam?
- BCS current certificate page
Entry requirements
- BCS current certificate page
Exam only (self study), How do I book an exam?
- BCS current certificate page
Exam only (self study), price and international pricing
- BCS Information Risk Management syllabus v7.1
PDF p.4, Qualification Suitability and Overview
- BCS Information Risk Management syllabus v7.1
PDF p.17, Examination Format, access and adjustments
- BCS Information Risk Management syllabus v7.1
PDF p.17, reasonable adjustments paragraph