PECB ISO 18788 Foundation
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The PECB ISO 18788 Foundation credential is an entry-level certification for individuals who want to demonstrate understanding of the fundamental methodologies, requirements, framework and management approach of a Security Operations Management System (SOMS) as specified by ISO 18788. PECB states that the training enables participants to learn the basic elements needed to implement and manage a SOMS, covering modules such as the SOMS policy, legal requirements and implications, risk assessment, management commitment, internal audit, management review and continual improvement. It suits individuals involved in security operations, those seeking knowledge of the main SOMS processes, and anyone interested in pursuing a career in security operations management. There are no prerequisites, and the certificate itself requires only passing the exam and signing the PECB Code of Ethics, with no professional experience, management system audit or SOMS project experience required. The two-day course runs through SOMS concepts on Day 1 and SOMS requirements plus the certificate exam on Day 2. The exam covers two competency domains: fundamental principles and concepts of a SOMS, and the SOMS itself. Preparation combines the training sessions, practical exercises and discussions, and practice tests that PECB describes as similar to the certificate exam.
What you'll study
About PECB ISO 18788 Foundation preparation
Is this an official PECB page or affiliated with PECB?
No. This is an independent study resource for candidates preparing for the exam. It is not affiliated with, endorsed by, or operated by PECB. Exam logistics, rules and policies should always be confirmed directly with PECB through its official channels before you book or sit the exam.
Do I need prior experience to take the ISO 18788 Foundation exam?
PECB lists no prerequisites for the training course. For the certificate, the requirements are passing the PECB ISO 18788 Foundation exam and signing the PECB Code of Ethics. No professional experience, no management system audit or assessment experience, and no SOMS project experience are required.
What does the exam actually cover?
PECB states the exam covers two competency domains: Domain 1, fundamental principles and concepts of a Security Operations Management System (SOMS), and Domain 2, the Security Operations Management System (SOMS). The course itself addresses the SOMS policy, legal requirements and implications, risk assessment, management commitment, internal audit, management review and continual improvement.
How long is the course, and what is the daily agenda?
The course runs two days. Day 1 covers introduction to Security Operations Management System concepts as required by ISO 18788. Day 2 covers Security Operations Management System requirements and includes the certificate exam. PECB notes that exam and certificate fees are included in the training course price.
What is the exam format, and how many questions are there?
PECB describes the exam as multiple choice and points candidates to its List of PECB Exams and Examination Rules and Policies for specifics on exam type, available languages and other details. The number of questions, the duration and the passing score are not stated on the pages reviewed, so confirm them with PECB.
What happens if I fail the exam?
PECB states that in case of exam failure, you can retake the exam within 12 months free of charge. Plan your schedule so a retake can fit inside that window, and review your weakest domain before re-sitting rather than repeating the same preparation approach.
How should I order my study across the two domains?
Start with Domain 1 to build vocabulary and the management-system logic behind a SOMS, then move to Domain 2 where requirements and processes are applied. Use the practical exercises and discussions from the course, then take the practice tests, which PECB describes as similar to the certificate exam, to check readiness.
What are common reasons candidates underperform?
Treating the course as pure terminology is a frequent problem: the exam tests how SOMS elements connect, including policy, legal requirements, risk assessment, management commitment, internal audit, management review and continual improvement. Skipping practice tests, or ignoring the relationship between ISO 18788 and other standards and regulatory frameworks, also leaves gaps.
How much continuing professional development does the course give?
PECB states that an attestation of course completion worth 14 CPD (Continuing Professional Development) credits will be issued to participants who have attended the training course. The credits relate to attending the course, not to passing the exam, so attendance matters if you want the attestation.
Is this course still being updated?
PECB states that updates to this training course have been discontinued and that a new version might be available upon request, with requests directed to [email protected]. If you want the most current materials, ask PECB before enrolling, and confirm the current exam scope at the same time.