BCS Information Security Management Principles Course (Foundation Certificate)

Protect your organisation from cyber threats, data breaches, and costly security failures

Cyberattacks are no longer rare, they are a constant business risk.
Every organisation that stores data, uses digital systems, or operates online is exposed to threats that can lead to financial loss, reputational damage, and legal consequences.

The BCS Foundation Certificate in Information Security Management Principles gives you the knowledge to understand these risks and how to manage them effectively.
You’ll learn how organisations protect their systems, data, and operations, ensuring confidentiality, integrity, and availability of information, while meeting legal and regulatory obligations.

Why is Information Security Important for Organisations?

  • Increasing cyber attacks
  • GDPR fines  
  • Data breaches  
  • Reputational damage.


What Are the Risks of Poor Information Security?
Without effective security measures, organisations are exposed to:

  • Data breaches and cyberattacks  
  • Financial loss and operational disruption  
  • Regulatory fines and legal consequences  
  • Loss of customer trust and reputational damage.


Why Learn Information Security Now?

  • Cyber threats are increasing in frequency and sophistication 
  • Data protection laws such as GDPR are becoming stricter 
  • Organisations are prioritising risk management and 
  • Resilience Security skills are in high demand globally.


Pass the exam to gain a BCS eCertificate in Information Security Management and one year of BCS Associate Membership*, demonstrating your expertise and commitment to compliance.

Pay with Klarna, PayPal, or card – interest-free instalments available, no credit check. Contact us to arrange live training or payment via invoice. *new BCS members only.

Accredited Excellence You Can Trust

Duco Digital is a BCS-accredited provider, delivering training that meets the highest standards in digital and data protection. Each module follows the official BCS exam syllabus, equipping you with the knowledge, confidence, and recognition to succeed.

Trusted by professionals and organisations worldwide. Certified by BCS, The Chartered Institute for IT.

About the Course

The BCS Information Security Management Principles course introduces how organisations protect information, systems, and services in a structured and effective way.

You will explore the core principles of information security, including confidentiality, integrity, and availability (CIA), and how these are applied in real-world environments. The course covers risk management, governance, and compliance, helping you understand how organisations balance security, cost, and business impact.

You will also learn how recognised frameworks such as ISO 27001, NIST, and Cyber Essentials are used to manage security risks and ensure compliance with legal and regulatory requirements, including GDPR.

By the end of the course, you will understand how to identify risks, apply security controls, and support secure and compliant business operations.

You'll learn:

  • Core information security principles (Confidentiality, Integrity, Availability)  
  • Common cyber threats, vulnerabilities, and attack methods  
  • How organisations identify, assess, and manage risk  
  • Types of security controls (preventive, detective, corrective)  
  • Legal and regulatory requirements, including GDPR  
  • Security frameworks such as ISO 27001 and NIST  
  • Incident response and how organisations manage security breaches  
  • Business continuity and disaster recovery planning  
  • Network and system security fundamentals  
  • The role of people, processes, and technology in security.

What you get:

 • Approx. 18 hours of online learning with 12 months’ access
 • BCS eCertificate on passing your exam
 • 1-year BCS Associate Membership (worth £92) after passing exam
 • Exam fee included — no hidden extras
 • Pass Assist package with live tutor support, practice exams, and exclusive video guides.
Write your awesome label here.
Course Syllabus
Course Requirements
Career Path
course subjects you will learn

Course Syllabus

Digital Forensics
Disaster Recovery
Incident Response
Physical Security Controls
Key Concepts of Networks and Network Security
DevSecOps
Security Lifecycle
Common Types of Cyberattacks
Threat Modelling and Common Threat Modelling Techniques
Concepts, Models and Technologies Associated with Security Architecture and
Operations
Principles of Information Security Governance and Information Assurance
Risk Management Lifecycle
Personal Data Privacy Legislation and Considerations
Terms and Concepts of Information Security Management
Security Standards, Procedures and Frameworks
Eligibility for the course

Course Requirements

No prior experience or knowledge needed, although we highly recommend beginners read the eBook we provide and take additional time to research topics of the course which are new to them.
A good level of English
is recommended
An internet connection with a mobile/tablet or laptop is required

Not sure if this course is right for you?
Contact us to check your suitability before starting.

career opportunities 

Career Path

Information security skills are in high demand across industries and this course can support progression into roles such as:

  • Information Security Analyst  
  • Cybersecurity Analyst  
  • Risk and Compliance Analyst  
  • IT Security Officer  
  • Governance and Risk Professional.


It also provides a strong foundation for further study in cybersecurity and information security.
Information security is critical across all sectors, including:
  • Health
  • Information Technology (IT)
  • Cybersecurity
  • Finance and Banking

  • Retail
  • E-commerce
  • Government
  • Public Services

  • Education
  • Telecommunications
  • Advertising
  • Researchers

It's important to note that virtually all sectors can benefit from information security training, as cybersecurity threats are increasing and pose a growing risk to organisations.
Empty space, drag to resize

Introducing Pass Assist

Your course price isn’t just for learning materials — it includes the complete Pass Assist package, designed to give you the best chance of passing your BCS exam with confidence. 

Two live video calls

Two live video calls with your course trainer for Q&A and a deeper understanding

Practice exam papers

Practice exam papers to test your knowledge and get exam-ready

Exclusive video guides

Exclusive video guides to make a learning plan, maximise the course, and prepare effectively

Tutor 
support

Tutor support via forum, email, and WhatsApp for help whenever you need it

BCS exam included 

BCS exam fee included — take your exam when you’re ready, at no extra cost

BCS
Books

All courses include the recommended BCS books on the course reading list to develop your knowledge and skills.

EMPLOYERS
NEED CYBER SECURITY SKILLS

80%

Security Breaches Involve Human Factors - Errors, Misuse, or Social Engineering.

200 Days

For Organisations to Detect and Contain a Data Breach

£££

A Single Data Breach Can Result in Significant Financial Loss, Operational Disruption, and Reputational Damage.

Learners from These Organisations Choose Us

Meet Your Instructors

Darren Winter

Company Director and BCS Trainer
I’m Darren, BCS Accredited Trainer and Company Director of Duco Digital Training. I've been teaching AI for over 7 years and am completing my PhD in AI Ethics at Cordoba University.
If you have any questions about choosing the right course for your career, please contact me.

James Mc Connell

Accredited BCS  AI Trainer
James has more than forty years’ experience in technical, management and digital roles across a range of sectors including manufacturing, defence, social enterprise and public services.  He is an engineering graduate and postgraduate in education, business and risk.  James is an experienced speaker, lecturer and instructor and is passionate about empowering people to harness their digital superpowers for good.

Frequently Asked Questions

Who is BCS?

BCS, the Chartered Institute for IT, is a globally recognised professional body trusted by corporations, academics, and IT practitioners alike. With more than 60,000 members across 150 countries,

BCS connects a diverse network of business leaders, educators, policy-makers, and technology professionals. Its mission is to guide the IT industry through ethical challenges, support the development of those working within the sector, and promote technology that benefits society as a whole. Through its qualifications, events, and community initiatives, BCS fosters professional growth, thought leadership, and responsible innovation in IT worldwide.

Why should I take a course in Information Security?

For Individuals
Build essential knowledge of cybersecurity and information security  
Improve your ability to identify and manage risk  
Gain confidence in working with data and digital systems  
Enhance your CV with a recognised BCS certification  
Support career progression into security, risk, or compliance roles.

For Organisations
Reduce vulnerability to cyber threats and data breaches  
Improve compliance with GDPR and security standards  
Build a security-aware culture across teams  
Strengthen governance, risk management, and resilience  
Protect business operations, reputation, and customer trust.

Who is this Information Security Management course for?

This course is suitable for both technical and non-technical professionals, including:
  • IT professionals and aspiring cybersecurity specialists 
  • Business analysts, project managers, and consultants 
  • Compliance, risk, and governance professionals 
  • Managers responsible for data, systems, or operations 
  • Anyone working with sensitive data or digital systems.


If your role involves handling information, making decisions, or supporting business operations, this course is highly relevant.

What does the course include?

  • Online access to structured modules and lessons that follow the official BCS syllabus
  • Pass Assist support package (tutor calls, practice papers, video guides, discussion forum, email/WhatsApp support)
  • A personal course login that saves your progress
  • Exam booking guidance and support
  • A BCS eCertificate and 1-year Associate Membership* when you pass
  • VAT.


*New BCS members only

What is Pass Assist?

Pass Assist is our unique support package designed to give you the knowledge, skills, and confidence to pass your BCS exam.

When you enroll in this course, Pass Assist gives you:
  • Two live video calls with your course trainer to ask questions and deepen your understanding
  • Practice exam papers to test your knowledge and get familiar with the exam format
  • Exclusive video guides to help you make a learning plan, get the most from the course, and prepare effectively for the exam
  • Ongoing tutor support via discussion forum, email, and WhatsApp for guidance whenever you need it


With Pass Assist, you’re never learning alone—you have the tools and support to succeed.

When is the start date of the course?

Self-study: Begin right after enrolment — learn anytime, anywhere. Book a 15-minute welcome call and a 15-minute exam prep session with your trainer directly via the course link.

Live training: Held on mutually agreed dates. Contact us to check availability.

How to start the course?

Enrol online now with card, PayPal, or Klarna — or contact us for invoice/bank transfer.

If you prefer live training, please contact us or message us on WhatsApp with a date you would like the training and any requirements, for example, the number of people. 

We train individuals and support teams with their training needs in organisations, colleges, universities, and government departments in different countries. Contact us if you have any questions.

What happens after I enroll?

  1. Click on the enrolment email to gain access.
  2. Complete your study
  3. Book your BCS exam using the link in the BCS email sent to you 14 days after enrolment
  4. Take your exam
  5. Download your BCS certificate from your BCS exam account when you pass
  6. Access your free* 1-year BCS Associate membership from the link in your BCS exam account when you pass
  7. Create a BCS professional profile, access further learning, build networks, and access career tools with a BCS membership

*New BCS members only

What is studying with Duco Digital Training like?


  • Self-paced learning that fits around your schedule

  • Step-by-step modules aligned with the syllabus

  • Our unique Pass Assist package of tutor support, BCS-recommended Books* discussion forums, and exam preparation resources

  • Accredited courses trusted by organisations worldwide

  • BCS certification and membership** that add real career value.


*BCS eBooks as recommended on your syllabus
** Pass the BCS exam to claim your certification. Membership for new BCS members only.

I prefer live training — how can I book this?

Prefer learning in real time with a trainer? We offer live online training for groups of two or more. If you’re learning solo, you can invite a friend or colleague to join. To book, just contact us with your preferred dates and group size, and we’ll confirm availability and customise the session to your needs.

Can organisations buy this course for teams?

Yes. Duco Digital Training partners with organisations, colleges, universities, and government departments around the world. We can enrol teams of any size, giving each learner their own login, progress tracking, and Pass Assist support. Payment is available by invoice or bank transfer, and our self-study approach allows groups to learn consistently, at their own pace, while keeping costs manageable.

How long will I have access to the course? 

You have 12 months to complete all BCS courses and take the exam. For career pathways that include multiple courses, simply contact us if you need extra time.

Live Training for Companies

Reduce risk, improve compliance, and protect your organisation from cyber threats

Looking to train a team?* 
We deliver bespoke information security training for organisations worldwide, online or onsite, helping teams understand real risks, prevent incidents, and build a strong security culture.

Ideal for organisations that:
  • Handle sensitive data or customer information  
  • Need to meet GDPR or security compliance requirements  
  • Want to reduce human error and insider risk  
  • Are strengthening cyber resilience and governance.


✔ Tailored to your organisation’s risks and systems
✔ Delivered by experienced practitioners
✔ Focused on real-world threats and scenarios
✔ Includes our exam-ready Pass Assist support
*minimum of two people
Write your awesome label here.

What People Say About Us

The course is really thorough about AI in general, and it covers all of the basic knowledge about AI. As a lecturer myself, I will teach this to my students.
Cholid
The training provided will assist me to conduct AI research projects in a more professional and systematic way. The knowledge provided will be incredibly valuable for my future study in the field of computer vision.
Muhammad
Good training materials for remote learning, and the most impressive part was the speed at which they responded to questions. I also had issues with the exam (through the exam platform, not Duco) and they were really helpful in resolving it.
Tom
The course is really thorough about AI in general, and it covers all of the basic knowledge about AI. As a lecturer myself, I will teach this to my students.
Cholid
The training provided will assist me to conduct AI research projects in a more professional and systematic way. The knowledge provided will be incredibly valuable for my future study in the field of computer vision.
Muhammad
Good training materials for remote learning, and the most impressive part was the speed at which they responded to questions. I also had issues with the exam (through the exam platform, not Duco) and they were really helpful in resolving it.
Tom

Get in touch today to discuss enrolment, team training, or payment options.

Created with