BCS CISMP Exam Prep

What you will be able to do

• Explain information security management principles and terminology
• Run risk management: assessment, treatment, and acceptance
• Apply the UK and international legal and regulatory framework
• Implement procedural, physical, and technical security controls
• Manage incidents, business continuity, and security assurance
• Pass a timed practice exam covering the CISMP syllabus

What is inside

5 modules, 20 lessons. Each module ends in a graded quiz.

1. 01

   Security Principles and Information Risk

   Covers the first two BCS CISMP domains, information security principles at ten percent and information risk at fifteen percent, which together carry a quarter of the exam. You will fix the vocabulary that the rest of the syllabus assumes, connect security spending to business value and professional ethics, work through United Kingdom data protection duties from a practitioner's seat rather than a lawyer's, and run a full risk lifecycle from threat identification through analysis, treatment and monitoring. Every lesson closes with exam-style checks that ask you to choose the strongest action rather than recite a definition.

   4 lessons · 15 quiz questions

2. 02

   Frameworks, Governance and Assurance

   Covers the BCS CISMP information security frameworks domain, which carries about fifteen percent of the exam. The module works through who is accountable for security and how a workable culture is built, how policies, standards, procedures and end user codes of practice fit together, how audit, compliance reporting and data classification make governance visible, and how ISO/IEC 27001, the NIST Cybersecurity Framework, the CIS Critical Security Controls and Cyber Essentials compare in purpose, scope and evidence. Every lesson uses original scenarios and exam style checks that reward judgement rather than recall.

   4 lessons · 15 quiz questions

3. 03

   Security Operations and the Secure Lifecycle

   Covers the BCS CISMP domains for security operations and for the security lifecycle with DevSecOps, which together account for around a quarter of the examination. The lessons build from architectural principles such as defence in depth, least privilege and separation of duties, through the working practice of a security operations centre and its logging, monitoring, endpoint and vulnerability management disciplines, into threat modelling and then secure development, testing, DevSecOps and change control. Every section teaches a method you could apply on Monday, with original scenarios and examination style checks that reward judgement rather than recall.

   4 lessons · 15 quiz questions

4. 04

   Technical, Physical and Environmental Controls

   Covers the BCS CISMP technical security domain together with physical and environmental security, which together account for about a fifth of the exam. You will work through identity and access control, network and communications security, cryptography, malware protection and secure configuration, then finish with the physical perimeter, equipment protection, supporting utilities and secure disposal. Every lesson closes with exam style checks that make you choose the control a scenario actually needs rather than recite a list.

   4 lessons · 15 quiz questions

5. 05

   Resilience, Forensics and Emerging Technologies

   Covers BCS CISMP syllabus areas 8 and 9, worth fifteen percent of the exam between them: business continuity and disaster recovery, incident response and management, digital forensics, and the security implications of cloud, connected devices, artificial intelligence and quantum computing. You will learn to separate continuity from recovery, derive and defend recovery objectives from a business impact analysis, drive an incident through detection, containment and lessons learned, protect digital evidence so it survives challenge, and apply a repeatable method to any technology that has not arrived yet. Every lesson closes with exam style checks that force you to pick the action a scenario demands rather than recite a definition.

   4 lessons · 15 quiz questions