EXIN Information Security Foundation based on ISO/IEC 27002
Exam Code: EX0-105
The EXIN Information Security Foundation certification validates a professional’s understanding of basic information security concepts, information value, threats, risks, security controls, legislation, regulations, and standards based on ISO/IEC information security principles.
- Exam Breakdown
- Domain Breakdown
- Access Breakdown
Exam Format
- Exam Code: EX0-105
- Certification Level: Foundation
- Exam Duration: 60 minutes
- Passing Score: 65%
- Unscored Content: EXIN does not officially mention unscored questions for this exam. The exam consists of scored multiple-choice questions.
Exam Details
- Question Types: Multiple choice
- Number of Questions: 40 multiple-choice questions
- Hands-On Questions: The exam does not include hands-on lab questions. It is a closed-book theory-based foundation exam.
Exam Policies
- Offline Proctoring: Can be taken through EXIN-approved exam partners or authorized test centres, depending on regional availability.
- Online Proctoring: Can be taken online through EXIN Anywhere or approved online exam delivery options.
- Waiting Period: EXIN retake rules may vary depending on the exam delivery method and exam partner. Candidates should check retake availability in their EXIN account or with the authorized training provider.
- Retake Fee: Full exam fee must normally be paid for each retake unless a training provider or voucher package includes a retake option.
Certification Validity and Renewal
- Validity: Generally considered lifetime validity unless EXIN, PeopleCert, an employer, or a training provider requires updated certification based on newer syllabus changes.
- Renewal Options: No mandatory renewal is officially listed for this foundation certification. Candidates may upgrade to higher-level information security, ISO/IEC 27001, data protection, cybersecurity, or risk management certifications.
Exam Fee
- Base Fee: The official exam fee may vary by country, currency, delivery method, and EXIN-authorized training provider.
- Taxes: Country-specific VAT/GST may apply. Example: If the exam fee is $243 USD, in India 18% tax applies, making the total $286.74 USD ($243 + $43.74 tax).
Prerequisites
There are no formal prerequisites for taking the EXIN Information Security Foundation exam. However, it is recommended to have:
- Basic awareness of IT, business processes, and organizational information handling
- Understanding of confidentiality, integrity, and availability concepts
- Familiarity with common security threats, risks, and controls
- Interest in ISO/IEC 27001, ISO/IEC 27002, information security management, or cybersecurity fundamentals
Exam Topics
- Information and Security: Information value, data, information, reliability, confidentiality, integrity, availabilitThreats and Risks: Threats, vulnerabilities, damage, risk analysis, risk management, and risk treatment
- Security Controls: Organizational, people, physical, and technical security controls
- Legislation, Regulations, and Standards: Laws, privacy requirements, compliance, ISO/IEC 27000, ISO/IEC 27001, and ISO/IEC 27002
- Information Security Management: Policies, responsibilities, awareness, suppliers, business continuity, audits, access control, malware protection, and monitoring
Intended Audience
The EXIN Information Security Foundation certification is ideal for professionals who handle information or confidential data in an organization, including roles such as:
- IT Support Professional
- Information Security Beginner
- Security Awareness Coordinator
- Compliance Assistant
- Risk Management Assistant
- Business Process Owner
- Small Business Owner
- New Cybersecurity Professional
- Data Protection or Privacy Team Member
Career Impact
Jobs You Can Get:
- Information Security Assistant, IT Support Analyst, Compliance Assistant, Risk Analyst, Security Awareness Coordinator, Junior Security Analyst, IT Administrator, Data Protection Support Associate.
Average Salary:
- Varies by country — U.S.: $55,000–$95,000 USD,
- India: ₹4,00,000–₹12,00,000 INR,
- United Kingdom: £30,000–£55,000 GBP,
- UAE: 90,000–180,000 AED per year.
Why It’s Valuable:
- It provides a strong foundation in information security principles, risk awareness, ISO/IEC standards, and security controls required for modern organizations handling sensitive information.
Exam Mode
The exam is proctored and can be taken either:
- In-person through EXIN-approved exam partners or authorized test centres
- Online through EXIN Anywhere or approved online proctoring options
Exam Booking Link
- Book your EXIN Information Security Foundation Exam via EXIN — Click here
https://www.exin.com/data-protection-security/exin-information-security-management-iso-iec-27001/information-security-foundation-based-on-iso-iec-27001/
Once you pass the exam
- Access your EXIN certificate through your EXIN candidate account
- Processing Time: Certificate availability may vary depending on exam delivery method and result processing
- Log in to your EXIN account
- Navigate to the certificate or exam results section
- Download or share your EXIN Information Security Foundation certificate or digital badge
Offers
Prepare with actual exam questions
To strengthen your knowledge and approach exam day with confidence. We provide practice questions to help you understand the exam format and question patterns.
Access the Real Exam QuestionsContact our consultant today for personalized guidance.
Why Atmic networks?
- Atmic Networks is a trusted global provider of professional IT training and certification mentorship.
- We deliver regularly updated, industry-relevant content tailored to real-world demands.
- Our expert mentors bring hands-on experience to guide your learning journey.
- Our clients consistently achieve high success rates in their certification exams.
- Enjoy instant access to high-quality digital learning materials.
- We offer dedicated 24/7 customer support to assist you whenever you need it.
Top Reasons to Choose
EXIN Information Security Foundation based on ISO/IEC 27002
High Demand for Information Security Awareness
Organizations need employees who understand information value, confidentiality, integrity, availability, threats, risks, and controls. This certification builds essential awareness for protecting sensitive business data and reducing security incidents.
Strong Foundation in ISO/IEC Security Concepts
The exam introduces ISO/IEC 27001 and ISO/IEC 27002 concepts, risk management, policies, access control, physical security, technical controls, compliance, and incident awareness, helping professionals understand structured information security practices.
Career Growth and Global Recognition
EXIN Information Security Foundation is globally recognized and useful for beginners entering cybersecurity, compliance, risk, IT support, privacy, audit, and security management career paths across multiple industries and organizations.
Top Certifications
Microsoft Office Specialist: Word Expert (Office 2019)
Microsoft Office Specialist: Word Expert (Office 2016)
Microsoft Office Specialist: Word Expert (Microsoft 365 Apps)
Microsoft Office Specialist: Word Associate (Office 2019)
Microsoft Office Specialist: Word Associate (Microsoft 365 Apps)
Microsoft Office Specialist: Word (Office 2016)
Microsoft Office Specialist: PowerPoint Associate (Office 2019)
Microsoft Office Specialist: PowerPoint Associate (Microsoft 365 Apps)
Microsoft Office Specialist: PowerPoint (Office 2016)
Microsoft Office Specialist: Outlook Associate (Office 2019)
Microsoft Office Specialist: Outlook (Office 2016)
Microsoft Office Specialist: Expert (Office 2019)
Microsoft Office Specialist: Expert (Microsoft 365 Apps)
Microsoft Office Specialist: Excel for Business Finance Associate
Microsoft Office Specialist: Excel for Accounting Associate
Microsoft Office Specialist: Excel Expert (Office 2019)
Microsoft Office Specialist: Excel Expert (Office 2016)
Microsoft Office Specialist: Excel Expert (Microsoft 365 Apps)
Microsoft Office Specialist: Excel Associate (Office 2019)
Microsoft Office Specialist: Excel Associate (Microsoft 365 Apps)
Microsoft Office Specialist: Excel (Office 2016)
Microsoft Office Specialist: Associate (Office 2019)
Microsoft Office Specialist: Associate (Microsoft 365 Apps)
Microsoft Office Specialist: Access Expert (Office 2019)
Microsoft Office Specialist: Access (Office 2016)
Microsoft Office Specialist: 2016 Master
Microsoft Certified: Windows Server Hybrid Administrator Associate
Microsoft Certified: SQL AI Developer Associate
Microsoft Certified: Power Platform Solution Architect Expert
Microsoft Certified: Power Platform Functional Consultant Associate
Microsoft Certified: Power Platform Developer Associate
Microsoft Certified: Power BI Data Analyst Associate
Microsoft Certified: Power Automate RPA Developer Associate
Microsoft Certified: Machine Learning Operations (MLOps) Engineer Associate
Microsoft Certified: Information Security Administrator Associate
Microsoft Certified: Fabric Data Engineer Associate
Microsoft Certified: Fabric Analytics Engineer Associate
Microsoft Certified: Dynamics 365: Finance and Operations Apps Solution Architect Expert
Microsoft Certified: Dynamics 365: Finance and Operations Apps Developer Associate
Microsoft Certified: Dynamics 365 Supply Chain Management Functional Consultant Associate
Microsoft Certified: Dynamics 365 Finance Functional Consultant Associate
Microsoft Certified: Dynamics 365 Field Service Functional Consultant Associate
Microsoft Certified: Dynamics 365 Customer Service Functional Consultant Associate
Microsoft Certified: Dynamics 365 Customer Experience Analyst Associate
Microsoft Certified: Dynamics 365 Business Central Functional Consultant Associate
Microsoft Certified: Dynamics 365 Business Central Developer Associate
Microsoft Certified: DevOps Engineer Expert
Microsoft Certified: Cybersecurity Architect Expert
Microsoft Certified: Azure for SAP Workloads Specialty
Microsoft Certified: Azure Solutions Architect Expert
Microsoft Certified: Azure Databricks Data Engineer Associate
Microsoft Certified: Azure Data Scientist Associate
Microsoft 365 Certified: Teams Administrator Associate
Microsoft 365 Certified: Endpoint Administrator Associate
Microsoft 365 Certified: Copilot and Agent Administration Fundamentals
Microsoft 365 Certified: Collaboration Communications Systems Engineer Associate
Microsoft 365 Certified: Administrator Expert
Cisco Certified Network Professional (CCNP)
Cisco Certified Network Professional – Enterprise
Cisco Certified Network Professional – Data Center
Cisco Certified Network Professional – Security
Cisco Certified Network Professional – Collaboration
Cisco Certified Network Professional- DevNet
Cisco Certified Network Professional-CyberOps
Cisco Certified CyberOps Associate
Cisco Certified DevNet Associate (Automation & DevOps focus)
Cisco Certified Internetwork Expert – Enterprise Wireless
Cisco Certified Internetwork Expert – Security
Cisco Certified Internetwork Expert – Data Center
Cisco Certified Internetwork Expert – Service Provider
Cisco Certified Internetwork Expert – Collaboration
Cisco Certified Architect
Microsoft Certified: Azure Fundamentals
Microsoft Certified: Security, Compliance, and Identity Fundamentals
Microsoft Certified: Azure Data Fundamentals
Microsoft Certified: Azure AI Fundamentals
Microsoft Certified: Power Platform Fundamentals
Microsoft 365 Certified: Fundamentals
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Azure Developer Associate
Microsoft Certified: Azure Security Engineer Associate
Microsoft Certified: Azure Network Engineer Associate
Microsoft Certified: Azure Data Engineer Associate
Microsoft Azure Database Administrator Associate
Microsoft Certified: Azure AI Engineer Associate
Microsoft Certified: Security Operations Analyst Associate
Microsoft Certified: Identity and Access Administrator Associate
Microsoft Azure Virtual Desktop Specialty
Cisco Certified Network Associate (CCNA)
Cisco Certified Internetwork Expert (CCIE) – Enterprise Infrastructure
Microsoft GitHub Actions Certification
Microsoft Certified: AI Business Professional
Microsoft Certified: AI Transformation Leader
Microsoft Certified: Agentic AI Business Solutions Architect
Microsoft Certified: Azure Cosmos DB Developer Specialty
Microsoft GitHub Foundations Certification
Microsoft GitHub Copilot Certification
Microsoft GitHub Advanced Security Certification
Microsoft GitHub Administration Certification
Add Review
Your email address will not be published
Customer review
Be the first to submit a review for this exam.
FAQ
-
Who should take the EXIN Information Security Foundation based on ISO/IEC 27002 exam?
The EXIN Information Security Foundation exam is suitable for anyone who handles information within an organization, especially confidential or sensitive information. It is ideal for IT staff, business users, security beginners, compliance assistants, privacy teams, small business owners, and professionals who want a foundation in information security principles and ISO/IEC standards.
-
How difficult is the EXIN Information Security Foundation exam?
The exam is considered beginner to moderate level. It focuses on understanding information security concepts, threats, risks, controls, legislation, regulations, and standards. Candidates who study the official syllabus, understand confidentiality, integrity, availability, risk management, access control, and security controls can usually prepare effectively without deep technical cybersecurity experience.
-
Why does EXIN offer the Information Security Foundation certification?
EXIN offers this certification to help organizations and professionals build a common understanding of information security. Since information is valuable and vulnerable, employees need to understand risks, responsibilities, controls, compliance, and standards. The certification supports better security awareness and prepares candidates for further information security, privacy, and risk certifications.
-
What tools and resources can be used to prepare for the EXIN Information Security Foundation exam?
Candidates can prepare using the official EXIN preparation guide, EXIN exam information, accredited training courses, official recommended reading, sample exam materials, and information security awareness resources. Focus on information value, CIA principles, threats, risks, risk treatment, organizational controls, people controls, physical security, technical controls, legislation, regulations, and ISO/IEC standards.
-
Is the EXIN Information Security Foundation certification still valuable in 2026?
Yes, this certification remains valuable in 2026 because information security, privacy, risk management, and compliance continue to be critical for organizations. It helps beginners prove foundational knowledge and supports career development in cybersecurity, IT support, compliance, data protection, audit, risk management, and ISO/IEC information security management roles.
