Examius
🇬🇧 United Kingdom · IT
CISMP (Certificate in Information Security Management Principles) Syllabus
BCS-awarded UK entry-level information security qualification, popular for government and public-sector roles. The full CISMP (Certificate in Information Security Management Principles) syllabus: 7 subjects, 22 chapters, 81 topics and 140 sub-topics, with 387 flashcards written against it.
CISMP (Certificate in Information Security Management Principles) subjects
CISMP (Certificate in Information Security Management Principles) has 7 subjects. Each one is listed below with its chapters in syllabus order; open a subject for every topic and sub-topic inside them.
Information Security Management Principles and Concepts
- Core Security Concepts and Terminology · 4 topics
- The Information Security Lifecycle and Governance · 4 topics
- Information Security Management Systems (ISMS) · 4 topics
Information Risk Management
- Risk Management Concepts · 4 topics
- The Risk Management Process · 4 topics
- Risk Methodologies and Standards · 4 topics
Information Security Frameworks, Law and Compliance
- Organisation and Responsibilities · 3 topics
- UK and International Law · 4 topics
- Standards, Procedures and Compliance · 4 topics
Procedural and People Security Controls
- Human Resource Security · 3 topics
- Security Awareness, Education and Training · 3 topics
- User Access Management and Provisioning · 3 topics
Technical Security Controls
- Protection from Malicious Software · 3 topics
- Networks and Communications Security · 4 topics
- Cryptography · 4 topics
- System and Software Security · 4 topics
Physical, Environmental and Operational Security
- Physical and Environmental Security · 3 topics
- Operational Security and Asset Management · 4 topics
- Security Monitoring and Vulnerability Management · 3 topics
Business Continuity, Incident Management and Assurance
- Incident Management · 4 topics
- Business Continuity and Disaster Recovery · 4 topics
- Investigations, Assurance and Continual Improvement · 4 topics
CISMP (Certificate in Information Security Management Principles) flashcards
387 question-and-answer cards across 7 subject decks, each shown in full on its subject page.
- Information Security Management Principles and Concepts — 50 cards
- Information Risk Management — 51 cards
- Information Security Frameworks, Law and Compliance — 50 cards
- Procedural and People Security Controls — 51 cards
- Technical Security Controls — 73 cards
- Physical, Environmental and Operational Security — 51 cards
- Business Continuity, Incident Management and Assurance — 61 cards
CISMP (Certificate in Information Security Management Principles) syllabus FAQ
What subjects are in the CISMP (Certificate in Information Security Management Principles) syllabus?
CISMP (Certificate in Information Security Management Principles) covers 7 subjects: Information Security Management Principles and Concepts, Information Risk Management, Information Security Frameworks, Law and Compliance, Procedural and People Security Controls, Technical Security Controls, Physical, Environmental and Operational Security and Business Continuity, Incident Management and Assurance.
How many chapters and topics are in the CISMP (Certificate in Information Security Management Principles) syllabus?
22 chapters and 81 topics, broken down further into 140 sub-topics, across 7 subjects. Technical Security Controls is the largest subject, with 15 topics in 4 chapters.
Are there CISMP (Certificate in Information Security Management Principles) flashcards?
Yes — 387 question-and-answer flashcards in 7 subject decks. Each deck is printed in full on its subject page here, and the same cards are in the Examius app with spaced repetition. The free plan covers one exam of your choice, including its flashcards; Examius Pro, a one-time purchase, unlocks every other exam and deck.
Related IT syllabuses
BCS (The Chartered Institute for IT) professional registration recognising senior IT practitioners in the UK.
CompTIA A+ / Network+ / Security+ syllabusVendor-neutral foundational IT certifications widely used in the UK for support, networking and cybersecurity roles.
ITIL Foundation syllabusAxelos/PeopleCert certification in IT service management best practice, widely required in UK IT operations.
Microsoft Azure Certifications (e.g. AZ-104, AZ-900) syllabusMicrosoft's role-based cloud certifications for administering and architecting solutions on Azure.
AWS Certified Solutions Architect syllabusAmazon Web Services certification validating skills in designing distributed systems on AWS.
Certified Ethical Hacker (CEH) syllabusEC-Council certification for penetration testing and ethical hacking skills.
Certified Information Security Manager (CISM) syllabusISACA certification focused on information security management and governance.
Certified Information Systems Auditor (CISA) syllabusISACA certification for professionals who audit, control, and assess information systems.
Certified Information Systems Security Professional (CISSP) syllabusISC2 advanced certification for experienced information security professionals.