NIST Cybersecurity Foundation

Every organization depends on computers, networks and data. One attack, such as ransomware or a stolen password, can stop work, expose customer data and cost a great deal of money to fix.

The U.S. National Institute of Standards and Technology (NIST) publishes free cybersecurity guidance that government agencies and companies of every size use. Its Cybersecurity Framework sorts cybersecurity work into six functions: Govern, Identify, Protect, Detect, Respond and Recover. Other NIST publications add detail, such as a catalog of security and privacy controls (NIST SP 800-53) and the requirements for protecting certain sensitive U.S. government information (NIST SP 800-171).

The PECB NIST Cybersecurity Foundation training course provides a foundation in cybersecurity principles and the NIST guidance organizations use, including the NIST Cybersecurity Framework, NIST SP 800-53 and NIST SP 800-171. It prepares you to support an organization's cybersecurity program, whether you are starting in cybersecurity or work in IT.

Course Summary

Delivery format: Self-study
Language: English
Suggested study schedule (The Tech Academy): 7 days at 3 hours a day, about 21 hours in total. Plan more time if the subject is new to you or you want extra practice and revision. PECB plans this course as two days of study, including the exam.
Included: More than 200 pages of PECB course material, your first exam attempt the certification application fee, the first year's annual maintenance fee, and an attestation of course completion worth 14 CPD credits
Credential: Passing the exam lets you apply for the PECB Certificate Holder in NIST Cybersecurity Foundation credential. It is open to everyone who passes the exam and signs the PECB Code of Ethics

Why Should You Attend?

Cybersecurity basics matter in every role, from IT support to management. This course gives you a base in NIST principles for assessing risk, supporting security initiatives and helping put cybersecurity programs in place. It covers risk management, security controls, awareness and training, and incident management.

After the course, you can sit the exam and apply for the PECB Certificate Holder in NIST Cybersecurity Foundation credential.

Who Should Attend?

Managers, consultants and team leads who support cybersecurity work in their organization
Staff in cybersecurity or information security roles who want to know the main frameworks and best practices
Professionals widening their knowledge of governance, risk management and incident response
People starting a cybersecurity career or wanting to know the NIST guidelines
IT staff and system administrators who implement and maintain secure systems

Learning Objectives

By the end of this course, you will be able to:

Explain the core principles and concepts of cybersecurity
Identify key NIST publications and frameworks, including NIST SP 800-12, NIST SP 800-53, the Risk Management Framework, NIST SP 800-171 and the Cybersecurity Framework
Name common security controls and best practices aligned with NIST guidance
Describe basic approaches to cybersecurity risk management and incident management
Apply these concepts to support awareness and improve security practices in an organization

Educational Approach

Designed for people new to cybersecurity, with value for those deepening their knowledge
Quizzes structured like the certificate exam

Prerequisites

This course is open to everyone, including people new to cybersecurity.

Course Agenda

The topics follow PECB's two-day plan for this course. At your own pace, you work through them in this order.

Day 1: Introduction to NIST cybersecurity standards and principles
Day 2: Security controls and measures, incident management, and the certificate exam

Examination

The PECB NIST Cybersecurity Foundation exam covers two competency domains:

Domain 1: Fundamental principles and concepts of cybersecurity
Domain 2: Risk management and cybersecurity controls

PECB's list of exams gives the exam type, duration and available languages.

Certificate Requirements

Credential	Exam	Professional experience	Cybersecurity project experience	Other requirements
PECB Certificate Holder in NIST Cybersecurity Foundation	PECB NIST Cybersecurity Foundation exam	None	None	Sign the PECB Code of Ethics

Questions About Enrolling

Does passing the exam make me certified?

Passing the exam lets you apply for a PECB credential, and PECB reviews your application. Foundation credentials are open to everyone who passes the exam and signs the PECB Code of Ethics. For Lead Implementer, Lead Auditor and Lead Manager courses, PECB awards the level that matches your experience. If you are new to the field, you start at the Provisional level and can apply to upgrade as you gain experience. Each course page lists the requirements for every level.

Can I add a portfolio program?

Yes, with ISO/IEC 27001 Foundation, ISO/IEC 27001 Lead Implementer and ISO/IEC 42001 Lead Implementer. Each portfolio program is a separate Tech Academy program with its own price and enrollment.

Explore the portfolio programs and find the one for your course

Do I need a portfolio program to get exam support?

Exam support, including office hours every two weeks for 90 days from enrollment, comes with the ISO/IEC 27001 and ISO/IEC 42001 courses themselves. Portfolio programs are an optional extra, sold separately.

Can I join a portfolio program if I trained with another provider?

Yes. Each portfolio program is sold on its own, for anyone who is taking or has completed the matching training.