Download the certification brochure (Spanish): Click here

Exam Details

• Exam Name: NIST Cybersecurity Framework 2.0 Certified Expert (CSFE)
• Exam Format: Multiple choice, online with remote supervision (proctoring)
• Exam Delivery: Safe Exam Browser
• Number of Questions: 75 questions: 65% scenarios / 35% analytical
• Exam Duration: 105 minutes
• Passing Score: 75% (57 out of 75 correct answers)
• Available Languages: Spanish / English
• Attempts: Maximum 2 attempts (minimum 14 days between attempts)
• Validity: 3 years · 15 CPD credits per year

Main Subjects

• Govern: context and risk strategy (20%): Organizational context; Risk strategy; Roles and policies; Supply chain.
• Identify: assets and risk assessment (20%): Asset management; Risk assessment; Current and target profiles.
• Protect: controls and resilience (20%): Identity and access; Data protection; Platform security.
• Detect and respond: security operations (20%): Continuous monitoring; Event analysis; Incident management.
• Recover and strategic integration of CSF 2.0 (20%): Recovery; Implementation tiers; Integration with other frameworks.

Who is this certification for?

• CISOs, risk managers and GRC consultants: Who support strategic decisions before leadership.
• Auditors and compliance officers: Who design assessments and integrated programs.
• Security engineers, architects and analysts: Who connect their technical work with the CSF program.

Prerequisites

No mandatory prerequisites: no prior experience, training or certification is required to take the exam. Recommended (not mandatory): cybersecurity risk, control and compliance concepts, and having worked with the NIST CSF or ISO/IEC 27001.