What an ISMS is, the standards family and PDCA
Move from controls to a recurring system of direction, resources, operation, evaluation and improvement.
The CC-first and selected PECB Foundation routes
Understand the CC-first and selected paid PECB routes, separating study, passing and awarded credentials.
Organizational context, scope, parties, leadership and policy
Define a meaningful system boundary, understand relevant parties and make leadership direction usable.
Risk concepts, scenarios, assessment and treatment
Describe a credible risk scenario before choosing a score, method or response.
Measures, metrics, risk indicators and management reporting
Measure the question you need to answer and report enough context for a useful decision.
ISMS objectives, risk treatment, applicability and controls
Connect objectives, treatment and applicability so a control has a reason and evidence.
Awareness, social engineering and security culture
Help people act securely through usable processes, verification, reporting and a learning culture.
Support, competence, communication, documented information and operation
Support a working ISMS through competence, communication, controlled information and operation.
Performance evaluation, audit types and management review
Evaluate performance and audit evidence against criteria, then make review decisions.
Nonconformity, correction, causes, corrective action and improvement
Establish the failed requirement, fix the problem, investigate causes and check effectiveness.
Cloud characteristics, service models and responsibilities
Understand cloud through characteristics, service boundaries and actual responsibilities.
AI fundamentals and applications across the CC domains
Apply security foundations to AI inputs, models, identities, dependencies, outputs and decisions.
Practice, feedback and a fictional learning portfolio
Use retrieval, scenarios and feedback, then connect fictional work into a coherent portfolio.
What this path still needs
- Free linked cases now support scope, risk-to-applicability reasoning, objectives, document control, operation, evaluation and improvement. These supplements do not reproduce complete current requirements.
- PAID SELECTED ROUTE: official PECB course completion, its activities and provider feedback remain required for the selected award route.
- Exact provider policy-category definitions, complete authorized clauses 4–10, full Annex A teaching and a complete reviewed SoA remain partial or missing.
- No free fresh full current official keyed Foundation assessment was verified. Inspect included course practice before considering any supplemental purchase.