Skip to main content

CybersecurityFoundationCCS-F

Certified Cybersecurity Specialist – Foundation

Validates foundational knowledge of cybersecurity principles, common threats, security controls and good practice for protecting people, systems and information.

Retired
Exam
1 h
Questions
40
Pass mark
65%
Valid for
3 years

About this certification

Holders can explain the confidentiality, integrity and availability triad and common threat types such as phishing, malware and ransomware. They can describe core technical and organisational controls, identity and access management basics and how to respond to a suspected incident.

Who it is for: IT professionals, new security staff and anyone needing a grounding in cybersecurity.

Syllabus

What you'll be assessed on — 6 modules. The percentage is each module's share of the exam.
  1. 01Security Principles15% of the exam
    • Explain confidentiality, integrity and availability
    • Describe defence in depth and least privilege
  2. 02Threats and Vulnerabilities20% of the exam
    • Describe common attack types including phishing, malware, ransomware and denial of service
    • Explain the relationship between threats, vulnerabilities and risk
  3. 03Security Controls20% of the exam
    • Distinguish between preventive, detective and corrective controls
    • Describe firewalls, endpoint protection and patch management
  4. 04Identity and Access Management15% of the exam
    • Explain authentication factors and multi-factor authentication
    • Describe role-based access control and account lifecycle
  5. 05Cryptography Basics15% of the exam
    • Explain symmetric and asymmetric encryption and hashing
    • Describe how TLS protects data in transit
  6. 06Incident Awareness and Security Culture15% of the exam
    • Describe the stages of incident response
    • Explain the role of security awareness in reducing risk

Competencies assessed

  • Security Fundamentals — Explains core security principles and terminology.
  • Threat Awareness — Recognises common threats and attack techniques.
  • Control Knowledge — Describes appropriate technical and organisational controls.
  • Incident Awareness — Responds appropriately to suspected security incidents.

Exam blueprint

Closed-book, timed examination with single-choice questions.
Questions per module40 questions · 1 h · pass 65%
  • Security Principles6
  • Threats and Vulnerabilities8
  • Security Controls8
  • Identity and Access Management6
  • Cryptography Basics6
  • Incident Awareness and Security Culture6
Question types
Single choice 100%
Delivery
Online (remote proctored), Test centre
Retakes
Up to three attempts within any 12-month period. A 14-day waiting period applies after a first unsuccessful attempt and 30 days after a second. Each retake requires a new booking and fee. Retakes draw a different randomised form from the question bank.

Provisional cut score — psychometric validation is required before live delivery. Blueprint v1.0.

Your path to certification

  1. 1

    Register

    Create a free account and start the programme.

  2. 2

    Practice

    Online practice test, 6 questions.

  3. 3

    Training

    Optional

    Online course or classroom — or skip it.

  4. 4

    Certification

    Independent exam and certification decision.

  • Practice test6 questions · 15 min · 70% to pass · free with the programme

Training is optional and does not by itself confer certification. Find a training partner

Eligibility & prerequisites

Required

  • No formal prerequisites

Recommended

  • Basic familiarity with computers, networks and the internet

More information

Certification process
  1. 1. Application — Create an account and apply for this certification.
  2. 2. Eligibility review — AQSCERT checks the formal eligibility requirements.
  3. 3. Assessment — Sit the 1 h examination online or at a test centre.
  4. 4. Independent decision — A decision maker not involved in your training or assessment reviews all evidence.
  5. 5. Issuance — A digitally signed certificate with QR verification, valid for 3 years.
  6. 6. Recertification — Before expiry, evidence 30 hours of CPD or re-sit the examination.
  7. Certificates may be suspended, withdrawn or revoked in line with the Certification Scheme. Status is always shown on the public verification page.
Scheme & accreditation
Certification scheme
Cybersecurity Certification Scheme
Scheme code
AQS-SCH-06
Scheme version
v1.0 (effective 1 Jan 2026)

Accreditation: AQSCERT is accredited by DA, an IAF MLA signatory, to ISO/IEC 17024. Our programmes are developed by leading experts from industry.

Ready to start CCS-F?

Practise online, add optional training, then sit the independent exam.