EXIN Cyber Security Foundation study guide
EXIN Cyber Security Foundation · Work through your exam, one topic at a time.
The EXIN Cyber Security Foundation is an entry-level certification offered by EXIN, an independent certification and examination institute. It is designed for professionals who need a working understanding of cyber security without necessarily holding a technical engineering role: IT and business staff, project and product managers, compliance and risk personnel, and anyone whose work touches information systems and digital risk. Candidates typically use it to establish a shared vocabulary with security teams and to demonstrate baseline competence to employers. On this page we organise preparation around four equally weighted domains: Cyber Security Fundamentals, Cyber Security Threats and Attacks, Cyber Security Controls and Measures, and Cyber Security Governance and Awareness. The EXIN Cyber Security Foundation study guide has 4 sections and about 1,793 words.
01Cyber Security Fundamentals
Cyber Security Fundamentals covers the vocabulary and models the exam reuses everywhere: asset, threat, vulnerability, risk, confidentiality, integrity and availability (CIA), cyberspace, and the difference between information security and cyber security. Expect definition-matching and short scenario questions that ask you to classify a situation, not to configure a tool.
444 words, about 2 min02Cyber Security Threats and Attacks
Threats and Attacks tests whether you can recognise an attack from its behaviour, name the threat actor, and separate the attack technique from the vulnerability it exploits. Questions often use a short incident description and ask for the best label or the first control.
456 words, about 2 min03Cyber Security Controls and Measures
Controls and Measures asks you to select and justify safeguards. You need to match a control to the risk, name its type, and explain why one control is not enough.
436 words, about 2 min04Cyber Security Governance and Awareness
Governance and Awareness covers the management system around security: who is accountable, which document says what, how risk is treated, and how people are trained and measured. Questions test the difference between governance and operation, and between policy and procedure.
457 words, about 2 min