NIST Cybersecurity Foundation

Every organization depends on computers, networks and data. One attack, such as ransomware or a stolen password, can stop work, expose customer data and cost a great deal of money to fix.

The U.S. National Institute of Standards and Technology (NIST) publishes free cybersecurity guidance that government agencies and companies of every size use. Its Cybersecurity Framework sorts cybersecurity work into six functions: Govern, Identify, Protect, Detect, Respond and Recover. Other NIST publications add detail, such as a catalog of security and privacy controls (NIST SP 800-53) and the requirements for protecting certain sensitive U.S. government information (NIST SP 800-171).

The PECB NIST Cybersecurity Foundation training course provides a foundation in cybersecurity principles and the NIST guidance organizations use, including the NIST Cybersecurity Framework, NIST SP 800-53 and NIST SP 800-171. It prepares you to support an organization's cybersecurity program, whether you are starting in cybersecurity or work in IT.

Course Summary

Delivery format

eLearning and self-study, both included

Language

English

Suggested study schedule (The Tech Academy)

7 days at 3 hours a day, about 21 hours in total. Plan more time if the subject is new to you or you want extra practice and revision. PECB plans this course as two days of study, including the exam.

Included

More than 200 pages of PECB course material, your first exam attempt, the certification application fee, the first year's annual maintenance fee, and an attestation of course completion worth 14 CPD credits

Support

A study plan and live office hours every two weeks for 90 days from enrollment come with this course.

Credential

Passing the exam lets you apply for the PECB Certificate Holder in NIST Cybersecurity Foundation credential. It is open to everyone who passes the exam and signs the PECB Code of Ethics

Training Mode: eLearning and Self-Study

This PECB course includes both training modes for one price, so you can use either or both. You find them in your myPECB account.

eLearning

Video lessons

  • Recorded video lessons from PECB Certified Trainers
  • Quizzes to check your progress, and extra reading
  • Watch on any device, wherever and whenever suits you
  • Best if you like a trainer to take you through the subject

Self-Study

Course material

  • PECB’s course material, more than 200 pages: explanations, examples, exercises and quizzes
  • No lessons: you read and work through it on your own
  • Study at your own pace, wherever you are
  • PECB suggests it for people who already know the subject well

Both lead to the same PECB exam and credential.

Why Should You Attend?

Cybersecurity basics matter in every role, from IT support to management. This course gives you a base in NIST principles for assessing risk, supporting security initiatives and helping put cybersecurity programs in place. It covers risk management, security controls, awareness and training, and incident management.

After the course, you can sit the exam and apply for the PECB Certificate Holder in NIST Cybersecurity Foundation credential.

Who Should Attend?

  • Managers, consultants and team leads who support cybersecurity work in their organization
  • Staff in cybersecurity or information security roles who want to know the main frameworks and best practices
  • Professionals widening their knowledge of governance, risk management and incident response
  • People starting a cybersecurity career or wanting to know the NIST guidelines
  • IT staff and system administrators who implement and maintain secure systems

Learning Objectives

By the end of this course, you will be able to:

  1. Explain the core principles and concepts of cybersecurity
  2. Identify key NIST publications and frameworks, including NIST SP 800-12, NIST SP 800-53, the Risk Management Framework, NIST SP 800-171 and the Cybersecurity Framework
  3. Name common security controls and best practices aligned with NIST guidance
  4. Describe basic approaches to cybersecurity risk management and incident management
  5. Apply these concepts to support awareness and improve security practices in an organization

Educational Approach

  • Designed for people new to cybersecurity, with value for those deepening their knowledge
  • Quizzes structured like the certificate exam

Prerequisites

This course is open to everyone, including people new to cybersecurity.

Course Agenda

The topics follow PECB's two-day plan for this course. At your own pace, you work through them in this order.

  • Day 1: Introduction to NIST cybersecurity standards and principles
  • Day 2: Security controls and measures, incident management, and the certificate exam

Examination

Exam

PECB NIST Cybersecurity Foundation exam

Length

1 hour

Questions

40 multiple-choice questions

Format

Closed book: no notes or course material

Languages

English

Where

Online from anywhere, in the PECB Exams app, with a PECB invigilator watching through your camera

Taking the exam in a language that is not your first? Ask on the day, and PECB gives you 10 extra minutes.

What the Exam Covers

The PECB NIST Cybersecurity Foundation exam covers two competency domains:

  • Domain 1: Fundamental principles and concepts of cybersecurity
  • Domain 2: Risk management and cybersecurity controls

Exam details from PECB's list of exams.

Certificate Requirements

Credential Exam Professional experience Cybersecurity project experience Other requirements
PECB Certificate Holder in NIST Cybersecurity Foundation PECB NIST Cybersecurity Foundation exam None None Sign the PECB Code of Ethics

How You Study & What Your Price Covers

USD $597 · eLearning and self-study · English

Work through the PECB materials and exercises at your own pace, using the course agenda on this page to guide your study. Kudzai Consulting Group arranges your PECB enrollment after purchase.

Your price covers the PECB training materials, examination and grading, course-completion attestation, and the applicable certificate or certification fees. Earning a credential requires passing the exam and meeting PECB’s requirements.

Exam support included: Your course price includes a study plan and live office hours with Dr. Rose Shumba every two weeks for 90 days from enrollment.

Build work to show employers: Mentored portfolio programs, purchased separately, are available for ISO/IEC 27001 Foundation, ISO/IEC 27001 Lead Implementer and ISO/IEC 42001 Lead Implementer.

Exam attempts: Under PECB’s rules for eLearning and self-study, your price covers your first exam attempt, one free retake if you need it, the certification application fee and the first year of PECB’s annual maintenance fee. Use them within 12 months of buying the course.

Take Your Next Career Step

Optional add-on: Get Hired in GRC · USD $197

Turn your learning and completed work into a tailored résumé, LinkedIn profile, interview answers and a portfolio link. Study eight short sections at your own pace, with videos, guides, templates, a workbook and AI review prompts. Six months of access.

Add it at checkout with any course or portfolio purchase. The $197 is separate from your program price.

Explore Get Hired in GRC

Questions About Enrolling

Does passing the exam make me certified?

Passing the exam lets you apply for a PECB credential, and PECB reviews your application. Foundation credentials are open to everyone who passes the exam and signs the PECB Code of Ethics. For Lead Implementer, Lead Auditor and Lead Manager courses, PECB awards the level that matches your experience. If you are new to the field, you start at the Provisional level and can apply to upgrade as you gain experience. Each course page lists the requirements for every level.

Can I add a portfolio program?

Yes, with ISO/IEC 27001 Foundation, ISO/IEC 27001 Lead Implementer and ISO/IEC 42001 Lead Implementer. Each portfolio program is a separate Tech Academy program with its own price and enrollment.

Explore the portfolio programs and find the one for your course
Do I need a portfolio program to get exam support?

Exam support, including office hours every two weeks for 90 days from enrollment, comes with every PECB course, including this one. Portfolio programs are an optional extra, sold separately.

Can I join a portfolio program if I trained with another provider?

Yes. Each portfolio program is sold on its own, for anyone who is taking or has completed the matching training.