Download the certification brochure (Spanish): Click here

Exam Details

• Exam Name: ISO/IEC 27032:2023 Implementer Certified (27032-IC)
• Exam Format: Multiple choice, online with remote supervision (proctoring)
• Exam Delivery: Safe Exam Browser
• Number of Questions: 50 questions: 70% scenarios / 30% conceptual
• Exam Duration: 90 minutes
• Passing Score: 70% (35 out of 50 correct answers)
• Available Languages: Spanish / English
• Attempts: Maximum 2 attempts (minimum 15 days between attempts)
• Validity: 3 years · 15 CPD credits per year

Main Subjects

• Internet security concepts (15%): The internet and cyberspace; Common threats and attacks; Structure of ISO/IEC 27032:2023.
• Stakeholders and roles (10%): Organizations and service providers; Users; Coordination between parties.
• Risk assessment and treatment (25%): Threat identification; Analysis and evaluation; Treatment with ISO/IEC 27005.
• Internet security controls (25%): Policies and access control; Malware and vulnerabilities; Networks, cryptography and exposed applications.
• Incident management and awareness (15%): Incident response; Information sharing; Training and awareness.
• Monitoring, improvement and integration (10%): Monitoring; Continual improvement; Integration with ISO/IEC 27001.

Who is this certification for?

• Information security professionals: Who protect the organization’s internet presence.
• Network and system administrators: Who implement technical controls.
• Consultants and risk leads: Who integrate internet security into the ISMS.

Prerequisites

No mandatory prerequisites: no prior experience, training or certification is required to take the exam. Recommended (not mandatory): information security and networking concepts, and basic knowledge of ISO/IEC 27001 or ISO 31000.