ITIL 4 InfoSec study guide
ITIL 4 InfoSec · Work through your exam, one topic at a time.
ITIL 4 Specialist: Information Security Management is a professional certification in the ITIL 4 certification scheme, offered through the PeopleCert certification body. It is aimed at practitioners who need to integrate information security management into digital product and service management: security managers, service management professionals moving into security roles, risk and compliance specialists, and consultants who advise organisations on protecting information across the service value chain. The ITIL 4 InfoSec study guide has 5 sections and about 1,782 words.
01Information security management in the ITIL 4 context
This domain checks whether you can place information security management inside the ITIL 4 service value system rather than treat it as a separate technical function. Expect questions on the practice's purpose, its links to the four dimensions and service value chain activities, and how it enables value co-creation.
387 words, about 2 min02Information security governance and strategy
This domain tests governance as direction and control, not day-to-day security operations. Questions probe how a governing body sets information security direction, how strategy follows organizational strategy and risk appetite, and how assurance and reporting work inside the ITIL 4 service value system.
356 words, about 2 min03Information security risk management
This domain tests the risk management practice applied to information security: how risk is identified, assessed, treated, monitored and communicated across value streams. Expect questions on risk appetite, treatment options, residual risk and the difference between a risk and an issue.
350 words, about 2 min04Information security controls and practices
This domain tests how controls are chosen, implemented, operated and measured within ITIL 4. It is not a control-catalogue memorization test.
352 words, about 2 min05Information security incident management and continual improvement
This domain tests security incident handling through the ITIL 4 incident management practice, its interfaces with problem management, change enablement and risk management, and the use of continual improvement to close systemic gaps. Incident management minimizes negative impact by restoring normal service quickly.
337 words, about 2 min