QISP Exam Information and Outline
Qualified Information Security Professional
Syllabus Update Checked on: November 6, 2026
QISP Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the
official QISP exam objectives. This course outline serves as your roadmap.
The information below reflects the 2026 syllabus defined by
AISP.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
- Exam Format
- 100 multiple-choice and multiple-answer questions (knowledge and scenario-based)
- Duration: 2 hours; closed book; online proctored (Pearson VUE OnVUE)
- QISP (Professional) awarded for scores of 65% and above
- Domain 1: Governance and Management
- Security governance structures, strategy, policies and frameworks
- Risk assessment and treatment; regulatory compliance (PDPA, Cybersecurity Act)
- Third-party and supply-chain risk
- Domain 2: Physical Security and Business Continuity
- Facility security controls
- BCP, DRP, crisis management and resilience testing
- Domain 3: Security Architecture and Engineering
- Zero trust, defence in depth and secure design
- Cryptography and PKI; identity and access management
- Domain 4: Operation and Infrastructure Security
- Network, cloud, OT and endpoint security
- SOC operations, SIEM, logging and monitoring
- Domain 5: Software Security
- Secure SDLC, DevSecOps, application testing and OWASP risks
- Domain 6: Cyber Defence
- Threat intelligence and threat hunting
- Incident response, digital forensics and vulnerability management