ITIL 4 InfoSec

We cannot state this from the current official source. The PeopleCert page for this certification returned a 404 at the time of retrieval, so question count, duration, format and pass mark are unverified here. Check the official PeopleCert certification page and syllabus before booking, and treat any figure you see elsewhere as unconfirmed until it matches the official source.

The current source gives no fee for this specific exam, so no figure is published on this page. PeopleCert does advertise a Take2 re-sit option as a general feature across its certifications, which typically bundles a second attempt with the first. Confirm price, currency, taxes and whether Take2 applies to this exam on the official site.

Expect a clear step up. Foundation tests recall and comprehension of ITIL 4 concepts; a Specialist exam expects you to analyse scenarios and choose between plausible options. The hard parts are usually risk treatment decisions, control selection trade-offs, and incident handling where security and service continuity conflict. Candidates who only memorise definitions tend to struggle with the applied questions.

Start with the ITIL 4 context so the service value chain, practices and guiding principles are fresh, then governance and strategy, because risk management depends on direction and appetite. Move to risk management, then controls and practices, and finish with incident management and continual improvement. That order lets each area reuse the vocabulary and decisions from the previous one.

Information security management sits alongside practices it depends on daily: risk management, incident management, problem management, change enablement, service level management, supplier management, access management, and continual improvement. Expect questions that ask how security management interacts with these rather than questions that treat it as an isolated silo.

Three recurring causes: treating information security as purely technical and ignoring governance, business context and value; confusing risk treatment options or applying them without reference to risk appetite; and answering incident questions from a pure containment instinct when the scenario rewards coordination, communication and learning. Practising scenario questions with written justifications exposes all three.

Not strictly, but it helps. The syllabus is written for people who apply ITIL 4 in real environments, and scenario questions reward judgement about trade-offs. If you lack security experience, build it through case studies: pick a service you know, identify its information assets, draft a risk register and walk through a simulated incident end to end.

Use them late, after you can explain each syllabus area without notes. Take one under timed conditions, then review every wrong answer and every lucky guess to find the underlying gap. PeopleCert offers official mock exams, which are the safest indicator of style. Avoid drilling the same mock repeatedly, since you start recognising items instead of reasoning.

The current PeopleCert site promotes ITIL Version 5 titles, including ITIL Foundation (Version 5) and ITIL AI Governance (Version 5), and lists an ITIL Foundation Bridge (Version 5) for existing ITIL 4 holders. However, the retrieved source gives no retirement or replacement date for this ITIL 4 Specialist exam. Check the official site before planning long study timelines.

The current source does not state a validity period for this exam, so no figure is given here. PeopleCert does operate a scheme for keeping certifications current, described on its site. Confirm the validity rules, renewal options and any continuing professional development requirements directly with PeopleCert before you rely on a specific number of years.