Section 1: COBIT 2019 Certificate programs
a. About the COBIT 2019 Certificate programs b. About the COBIT 2019 Certificate exams c. COBIT 2019 training options
Section 2: Cybersecurity Audit Certificate program
a. About the Cybersecurity Audit Certificate program b. About the Cybersecurity Audit Certificate exam c. Cybersecurity Audit training options
Section 3: Cybersecurity Fundamentals Certificate program
a. About the Cybersecurity Fundamentals Certificate program b. About the Cybersecurity Fundamentals Certificate exam c. Cybersecurity Fundamentals training options
Section 4: IT Risk Fundamentals Certificate program
a. About the IT Risk Fundamentals Certificate program b. About the Cybersecurity Fundamentals Certificate exam c. IT Risk Fundamentals training options
Section 5: Before the exam
a. Ensure you have the proper technology b. Purchase the exam c. Schedule the exam d. Reschedule the exam
Section 6: During the exam
a. Exam requirements b. Exam rules c. Taking the exam d. Online exam environment e. Issues during the exam
Section 7: After the exam
a. Exam results b. Viewing your score and accessing your certificate c. Claiming & sharing your digital badge d. Retaking the exam
Section 8: Help
a. Technical support b. ISACA customer service
Page | 3
Section 1: COBIT 2019 Certificate programs
a. About the COBIT 2019 Certificate programs
The COBIT 2019 Certificate programs were designed to help COBIT 2019 users gain a more in-depth understanding of the COBIT 2019 Framework and provide attestation of the individual’s knowledge of the various aspects of
COBIT 2019 and enterprise governance of information and technology (EGIT). The programs include:
The COBIT 2019 Foundation Course and Exam
The COBIT 2019 Design and Implementation Course and Exam
Implementing the NIST Cybersecurity Framework Using COBIT 2019 Course and Exam b. About the COBIT 2019 Certificate exams
COBIT 2019 Foundation COBIT 2019 Design and
Implementation
Implementing the NIST
Cybersecurity Framework
Using COBIT 2019
Description Certificate candidates explore COBIT 2019 concepts, principles and methodologies used to establish, enhance and maintain a system for effective governance and management of enterprise information technology.
The exam will test a candidate’s understanding of the topics and those that achieve a passing score on the COBIT 2019 Foundation exam receive the COBIT
2019 Foundation
Certificate.
Certificate candidates explore
COBIT 2019 key concepts provided within the COBIT 2019
Design Guide and the COBIT
2019 Implementation Guide.
The candidates will also learn how to apply these concepts in
(simulated) practice, how to analyze governance-related problems and solutions based on COBIT 2019 solutions. Those that achieve a passing score on the COBIT 2019 Design and
Implementation Exam receive the COBIT 2019 Design and
Implementation Certificate.
Certificate candidates explore the NIST Cybersecurity
Framework, its goals, implementation steps, and the ability to apply the information in an organization’s environment. The exam is for individuals who have a basic understanding of both COBIT
2019 and security concepts, and who are involved in importing and/or building the cybersecurity program and their enterprises.
Prerequisites
None COBIT 2019 Foundation
Certificate
COBIT 2019 Foundation
Certificate
Domain (%) Framework Introduction
(12%)
Principles (13%)
Governance System and
Components (30%)
Governance and
Management Objectives
(23%)
Performance Management
(4%)
Designing a Tailored
Governance System (7%)
Business Case (3%)
Implementation (8%)
COBIT 2019 Basic Concepts (8%)
Design Factors for a Governance
System (15%)
Impact of Design Factors (3%)
The Governance System Design
Workflow (32%)
Implementing and Optimizing
I&T Governance Overview (7%)
Governance Implementation
Lifecycle (32%)
Key Topics Decision Matrix (3%)
Overview of the Cybersecurity
Framework (10%)
Cybersecurity Framework
Structure (15%)
Framework Implementation
(75%)
No. of
Questions
75 Multiple-choice 60 Multiple-choice 50 Multiple-choice
Page | 4
Exam
Length
2 hours (120 minutes) 3 hours (180 minutes) 1.5 hours (90 minutes)
Passing
Score
65% 60% 65%
Exam
Languages
English, Chinese Simplified,
Japanese, Spanish
English English
Please note that purchases are non-refundable and non-transferable. It’s important that exam candidates first confirm access to the required technology to launch the exam before purchasing COBIT 2019 Certificate exam.
To review the technology requirements, refer to Section 4a of this guide. Candidates have 365-days from their date of purchase to take the exam.
c. COBIT 2019 training options
ISACA offers a wide variety of COBIT training opportunities designed to fit your unique requirements for subject matter and learning style. Training options include:
Classroom training (offered by accredited training partners)
Virtual instructor-led training
Conference workshops
Onsite and Self-Study
Training week
ISACA also offers core publications that provide the foundation for creating a customized governance program for information and technology, right-sized to the needs of your enterprise.
Please visit ISACA’s website for more information on COBIT 2019 training and publications.
Page | 5
Section 2: Cybersecurity Audit Certificate program
a. About the Cybersecurity Audit Certificate program
The Cybersecurity Audit Certificate program covers four key areas of cybersecurity audit: cybersecurity and audit’s role, cybersecurity governance, cybersecurity operations, and specific technology topics. The comprehensive program is purchased as a bundle and includes: 1.) a study guide, 2.) a training course offered in choice of formats,
3.) an online, remote proctored exam.
b. About the Cybersecurity Audit Certificate exam
Cybersecurity Audit
Description Certificate candidates explore concepts related to evaluating cybersecurity risk and auditing the cybersecurity controls for an organization and then demonstrate their understanding of the topics by achieving a passing score on the Cybersecurity Audit
Certificate exam.
Pre-requisites None
Domain (%) Cybersecurity Operations (45%)
Cybersecurity Technology Topics (30%)
Cybersecurity Governance (20%)
Cybersecurity and Audit’s Role (5%)
No. of Questions 75 Multiple-choice
Exam Length 2 hours (120 minutes)
Passing Score 65%
Exam Languages English
Exam Price Bundle prices vary based on the training format chosen. For bundle pricing and more information on the types of trainings offered, please refer to
If a candidate does not pass the exam included with their bundle, retake exams for non-members. Refer to Section 6d for more information regarding retake attempts.
Please note that purchases are non-refundable and non-transferable. It’s important that exam candidates first confirm access to the required technology to launch the exam before purchasing a Cybersecurity Audit
Certificate bundle. To review the technology requirements, refer to Section 4a of this guide. Candidates have
365-days from their date of purchase to take the exam.
c. Cybersecurity Audit training options
The Cybersecurity Audit Certificate exam is purchased as part of a bundle, including the Cybersecurity Audit
Certificate Study Guide and your choice of training. Options include online self-paced learning, virtual instructorled training and onsite options held at various locations throughout the year. It is recommended that you complete your training prior to scheduling your Cybersecurity Audit Certificate exam. Bundle prices vary based on the training format chosen. For bundle pricing and more information on the types of trainings offered, please refer
Page | 6
Section 3: Cybersecurity Fundamentals Certificate program
a. About the Cybersecurity Fundamentals Certificate program
The Cybersecurity Fundamentals Certificate is a knowledge-based certificate offered by ISACA. As part of ISACA’s
Cybersecurity Nexus (CSX) program, the certificate is particularly relevant for recent college/university graduates and those looking for a career change to cybersecurity. The certificate is aligned with the National Institute of
Standards and Technology (NIST) National Initiative for Cybersecurity Education (NICE), which is compatible with global cybersecurity issues, activities and job roles. The certificate is also aligned with the Skills Framework for the
Information Age (SFIA).
b. About the Cybersecurity Fundamentals Certificate exam
Cybersecurity Fundamentals
Description Certificate candidates demonstrate their understanding of the principles that frame and define cybersecurity, and the integral role of cybersecurity professional in protecting enterprise data by achieving a passing score on the Cybersecurity
Fundamentals Certificate exam.
Pre-requisites None
Domain (%) Cybersecurity Concepts (10%)
Cybersecurity Architecture Principles (20%)
Security of Network, System, Application, & Data (40%)
Incident Response (20%)
Security of Evolving Technology (10%)
No. of Questions 75 Multiple-choice
Exam Length 2 hours (120 minutes)
Passing Score 65%
Exam Languages English, Chinese Simplified, Spanish
Please note that purchases are non-refundable and non-transferable. It’s important that exam candidates first confirm access to the required technology to launch the exam before purchasing a Cybersecurity Fundamentals
Certificate exam. To review the technology requirements, refer to Section 4a of this guide. Candidates have 365- days from their date of purchase to take the exam.
c. Cybersecurity Fundamentals training options
There are many ways to prepare for the exam. You will be able to choose a method best suited to your personal learning style and preferences. Options include:
Cybersecurity Fundamentals Study Guide (click “Get the Training”)
Conference workshops & sessions
Virtual instructor-led training
Online course
Training week
Learn more about the Cybersecurity Fundamentals Certificate program on ISACA’s website.
Page | 7
Section 4: IT Risk Fundamentals Certificate program
a. About the IT Risk Fundamentals Certificate program
The IT Risk Fundamentals Certificate is a knowledge-based certificate offered by ISACA. This program is ideal for professionals who wish to learn about risk and information and technology (I&T)-related risk, who currently interact with risk professionals, or are new to risk and interested in working in the risk or IT risk profession.
b. About the Cybersecurity Fundamentals Certificate exam
IT Risk Fundamentals
Description Certificate candidates will explore basis terminology, concepts, general practices and explanations of risk and I&T-related risk, and then demonstrate their understanding of the topics by achieving a passing score on the IT Risk
Fundamentals Certificate exam.
Pre-requisites None
Domain (%) Risk Intro and Overview (5%)
Risk Governance and Management (15%)
Risk Identification (20%)
Risk Assessment and Analysis (25%)
Risk Response (15%)
Risk Monitoring, Reporting and Communication (20%)
No. of Questions 75 Multiple-choice
Exam Length 2 hours (120 minutes)
Passing Score 65%
Exam Languages English
Please note that purchases are non-refundable and non-transferable. It’s important that exam candidates first confirm access to the required technology to launch the exam before purchasing a Cybersecurity Fundamentals
Certificate exam. To review the technology requirements, refer to Section 4a of this guide. Candidates have 365- days from their date of purchase to take the exam.
c. IT Risk Fundamentals training options
There are many ways to prepare for the exam. You will be able to choose a method best suited to your personal learning style and preferences. Options include:
IT Risk Fundamentals Study Guide
Conference workshops & sessions
Virtual instructor-led training
Online course
Training week
Learn more about the IT Risk Fundamentals Certificate program on ISACA’s website.
Page | 8
Section 5: Before the exam
a. Ensure you have the proper technology
The list below contains all the hardware and software requirements for the exam.
Operating system supported: Windows, Macintosh 10
Web browser: Google Chrome or Chromium version 32 and above
You will need to download the PSI Secure Browser (This can be done NO MORE than 30 minutes prior to your scheduled exam time. If you are taking your exam from a work location, we advise contacting your local IT administrator to inform them that you will need to download the browser to your machine.) o Browser settings: Your browser must accept 3rd party cookies for only the duration of the exam
Webcam/Microphone: Minimum VGA 640 x 480 resolution, enabled built in or external microphone
Bandwidth: Minimum 500kb/s download and 256kb/s upload
Hardware Requirements: 1GB RAM & 2GHz dual core processor, minimum 1280 x 800 resolution
It is highly recommended that before scheduling, candidates perform the compatibility check on the computer you will be using to take the exam. This can be accessed at any time once you have registered for the exam directly compatibility check 72 hours prior to your scheduled exam time in case changes to your machine software or hardware have occurred since scheduling. Please contact PSI Technical Support if you have any questions about your compatibility test results:
Inside the U.S.: (844) 267-1017
Outside the U.S.: 1-702-939-6734
Note: Please be aware that you cannot take an exam using a virtual machine even though the compatibility check may not display any issues. The compatibility check is unable to detect a virtual machine.
Page | 9
When you schedule the exam, you can also view these requirements and perform another compatibility check.
Refer to Section 4c of this guide.
Note that purchases are non-refundable, so please check your system requirements prior to completing your purchase.
b. Purchase the exam
The registration form and payment must be completed before you can schedule an exam. Exam fees are nonrefundable and non-transferable. When you complete the online registration process, you are agreeing to adhere to and accept ISACA’s Candidate Security Agreement. It is important that you understand this agreement prior to
Programme scope, delivery arrangements and suitability are confirmed during enquiry.