Cybersecurity Foundation
PECB Cybersecurity Foundation
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The PECB Cybersecurity Foundation is an entry-level training course and certificate exam for people who need a working grasp of core cybersecurity principles and how a cybersecurity program is built and run. PECB positions the course as an in-depth exploration of core cybersecurity principles and concepts aligned with industry best practices such as ISO/IEC 27032 and the NIST Cybersecurity Framework. The target audience is broad: managers and consultants expanding their cybersecurity knowledge, professionals who want to familiarize themselves with cybersecurity management best practices, individuals who carry out cybersecurity activities inside their organization, and people pursuing a cybersecurity career. There are no prerequisites to participate in the training course. The exam covers two competency domains: fundamental cybersecurity principles and concepts, and the cybersecurity program. Stated learning objectives are to explain fundamental cybersecurity concepts and principles, identify the main standards and frameworks for cybersecurity such as ISO/IEC 27032 and the NIST Cybersecurity Framework, and explain approaches, methods, and techniques for ensuring cybersecurity. The course runs over two days: Day 1 covers introduction to fundamental concepts of cybersecurity, and Day 2 covers cybersecurity program approaches and the certificate exam. Preparation combines practical exercises, multiple-choice quizzes, and illustrative demonstrations of best practices; PECB states that the quiz structure within the course closely mirrors that of the certificate exam. Participants receive training materials of more than 200 pages, and attendees earn an attestation of course completion worth 14 CPD credits.
What you'll study
About Cybersecurity Foundation preparation
What does the exam cover?
PECB states the exam fully meets the requirements of its Examination and Certification Program and covers two competency domains: Domain 1, Fundamental cybersecurity principles and concepts, and Domain 2, Cybersecurity program. The course objectives map to these domains, including explaining core principles and identifying frameworks such as ISO/IEC 27032 and the NIST Cybersecurity Framework.
Do I need prior experience or certifications to take the course?
No. PECB states there are no prerequisites to participate in the training course. The certificate requirements table also lists no professional experience, no management system audit or assessment experience, and no project experience for the PECB Certificate Holder in Cybersecurity Foundation designation; the other requirement listed is signing the PECB Code of Ethics.
How long is the course, and what is the daily agenda?
The agenda is two days. Day 1 is Introduction to fundamental concepts of cybersecurity. Day 2 covers cybersecurity program approaches and the certificate exam. PECB does not publish the exam duration or the number of exam questions on this course page, so check the List of PECB Exams and the Examination Rules and Policies for those details.
What is the exam format?
PECB's course description states the training includes multiple-choice quizzes, and that the quiz structure within the course closely mirrors that of the certificate exam. For the authoritative statement of exam type, languages available, and other exam details, PECB directs candidates to the List of PECB Exams and the Examination Rules and Policies.
What happens if I fail on the first attempt?
PECB states that candidates who complete the training but do not pass the exam can retake the exam at no additional cost within a 12-month period from the initial exam date. The free retake is tied to completing the training, so keep your course completion documentation and track your initial exam date carefully.
Are the exam and certificate fees extra?
No. PECB states that certificate and examination fees are included in the price of the training course. The training also includes comprehensive materials of more than 200 pages with practical examples, exercises, and quizzes. PECB does not publish a standalone fee figure on this page, so confirm pricing with PECB or your training partner.
What study materials and recognition do I get?
Participants receive comprehensive training materials comprising more than 200 pages of content, including practical examples, exercises, and quizzes. Participants who attend the training course also receive an attestation of course completion worth 14 CPD (Continuing Professional Development) credits, which supports continuing professional development records.
How should I order my study across the two days?
Follow the agenda sequence: secure the fundamental concepts and principles first, then move to cybersecurity program approaches. Use the in-course multiple-choice quizzes as diagnostics because PECB says their structure closely mirrors the certificate exam, and revisit any domain where quiz results are weak before sitting the exam.
What are the most common ways candidates lose marks?
The stated objectives emphasize explaining concepts and identifying standards and frameworks, so vague familiarity is not enough; be ready to distinguish ISO/IEC 27032 and the NIST Cybersecurity Framework and to explain approaches, methods, and techniques for ensuring cybersecurity. Skipping the practical exercises and quizzes removes your main feedback loop before the exam.
Is this the same as PECB's other cybersecurity courses?
No. PECB lists Cybersecurity Foundation and Lead Cybersecurity Manager as separate courses under Cybersecurity Management, and also offers NIST Cybersecurity Foundation and NIST Cybersecurity Lead Implementer. Foundation level assumes no prerequisites, while other courses target different roles and depth, so match the course to your intended responsibilities.