Quick answer: CISMP (Certificate in Information Security Management Principles) is BCS's foundation-level information security certification and one of the UK's most widely recognised entry-level cyber security qualifications. The current v10 exam has 40 multiple-choice questions in 60 minutes, the pass mark is 65% (26 out of 40), and there are no prerequisites.
The BCS Certificate in Information Security Management Principles (CISMP) gives candidates a solid foundation in information security management. It covers the core principles of confidentiality, integrity and availability, along with risk management, security frameworks, legislation and standards, security controls and business continuity.
CISMP is widely used in the UK as a first step into cyber and information security careers, and is often requested in job adverts for security analyst, governance, risk and compliance (GRC), and information assurance roles.
CISMP v9 (Old)
Questions : 100
Duration : 2 hours
Pass Mark : 65 out of 100
Structure : Older syllabus
CISMP v10 (Current)
Questions : 40
Duration : 60 minutes
Pass Mark : 26 out of 40 (65%)
Structure : 10 modules
Code : CISMP-V10
Exam Name : BCS Certificate in Information Security Management Principles
Awarding Body : BCS, The Chartered Institute for IT
Level : Foundation
Syllabus Version : v10 (current)
Number of Questions : 40 multiple-choice
Duration : 60 minutes
Pass Mark : 65% (26 out of 40)
Prerequisites : None
Module Area : Information Security Management Principles
What It Covers : Core concepts: confidentiality, integrity, availability and key security terms
Module Area : Information Risk
What It Covers : Threats, vulnerabilities, risk assessment and risk treatment
Module Area : Information Security Framework
What It Covers : Governance, policies, standards and the organisation's security structure
Module Area : Procedural and People Security Controls
What It Covers : Security awareness, training, HR security and acceptable use
Module Area : Technical Security Controls
What It Covers : Protection against malware, network security, access control and cryptography
Module Area : Incident Management
What It Covers : Detecting, reporting, responding to and learning from security incidents
Module Area : Legislation, Standards and Business Continuity
What It Covers : Relevant laws and regulations, international standards, and business continuity and disaster recovery
Aspiring information and cyber security professionals
IT professionals moving into security roles
Managers and team leaders responsible for information security
GRC, compliance, audit and data protection professionals
The current CISMP v10 exam has 40 multiple-choice questions, and you have 60 minutes to complete it.
The pass mark is 65%, which means at least 26 correct answers out of 40.
CISMP v9 was a two-hour exam with 100 questions. The current v10 exam has 40 questions in 60 minutes and a syllabus structured into 10 modules.
No. There are no formal prerequisites, which makes CISMP a good entry point into information security.
It covers information security principles, information risk, security frameworks, procedural and technical security controls, incident management, legislation and standards, and business continuity.
It's ideal for aspiring security professionals, IT staff moving into security, and managers responsible for information security in their organisation.
Yes. CISMP is one of the UK's most widely recognised entry-level information security qualifications.
Study anywhere with our portable PDF question bank
Simulate real exam conditions with our online engine
Everything you need to know about the Certificate in Information Security Management Principles Practice Exam certification
Showing 5 of 20 FAQs
4,216 Students Downloaded this exam
Updated September 09, 2026
Stay current with frequently updated content
We're confident in our materials' quality