The NIST Privacy Framework provides a common language for understanding, managing, and communicating privacy risk with internal and external stakeholders. The framework is adaptable to any organization’s role(s) in the data processing ecosystem. It can be used to help identify and prioritize actions for reducing privacy risk, and it is a tool for aligning policy, business, and technological approaches to managing that risk. The NIST Privacy Framework Foundation is an entry-level certification intended for professionals seeking to validate their knowledge of the NIST Privacy Framework. The NIST Privacy Framework Foundation certification exam is based on The NIST Privacy Framework Version 1.0.
The exam includes topics such as Key Terms and definitions, the Privacy Framework components (Core, Profiles, and Implementation Tiers), Cybersecurity and Privacy Risk Management, Privacy Risk Assessment, the Privacy Framework Core Structure (Functions, Categories, and Subcategories), the five Privacy Framework Functions (Identify-P, Govern-P, Control-P, Communicate-P, and Protect-P), Profiles, Implementation Tiers, Mapping to Informative References, Accountability, Establishing or Improving a Privacy Program (Ready, Set, and Go), Applying to the System Development Life Cycle, Using within the Data Processing Ecosystem, and Informing Buying Decisions.
The NIST Privacy Framework Foundation certification exam is an online, closed-book, and remotely-proctored exam. It includes 40 questions and the passing score is 70%. You will have 60 minutes to complete the exam.
Validate your knowledge of privacy and advance your career.
Register for your online proctored exam now!
Exam code |
ITC-066 |
Launch date |
December 4, 2021 |
Exam description |
The NIST Privacy Framework Foundation exam tests the candidate knowledge in the NIST Privacy Framework. |
Current version |
1.0 |
Exam format |
Multiple choice; computer-based; closed book |
Number of questions |
40 questions |
Passing score |
70% (28 out of 40) |
Exam duration |
60 minutes |
Level |
Foundation |
Languages |
English and Brazilian-Portuguese |
Exam description |
Key Terms and definitions, the Privacy Framework components (Core, Profiles, and Implementation Tiers), Cybersecurity and Privacy Risk Management, Privacy Risk Assessment, the Privacy Framework Core Structure (Functions, Categories, and Subcategories), the five Privacy Framework Functions (Identify-P, Govern-P, Control-P, Communicate-P, and Protect-P), Profiles, Implementation Tiers, Mapping to Informative References, Accountability, Establishing or Improving a Privacy Program (Ready, Set, and Go), Applying to the System Development Life Cycle, Using within the Data Processing Ecosystem, and Informing Buying Decisions. |
RECOMMENDED HOURS OF STUDY |
16 hours |
Bloom's Taxonomy |
Level 1 (Remembering), Level 2 (Understanding) and Level 3 (Applying) |
Recommended reading |
• The NIST Privacy Framework Version 1.0 - https://www.nist.gov/privacy-framework/privacy-framework |
Prerequisites |
There are no prerequisites for this certification |
Recommended experience |
Six months of work experience in Privacy and Data Protection |
Validity period |
Lifetime |
Domains | Weight |
---|---|
1. Terms and definitions |
10% |
2. Privacy Framework Core Structure |
15% |
3. Functions, Categories, and Subcategories |
20% |
4. Implementation Tiers |
20% |
5. Profiles |
20% |
6. Establishing or Improving a Privacy Program |
15% |
Total | 100% |
Browse our certification programs and choose your certification.
Discover the exam objectives and prepare for your exam.
Register for your online proctored exam.
Take your online proctored exam in the comfort of your home or office.
Congratulations! You are certified!
All exams are available for $150 USD each. Prices may vary slightly by region and currency exchange rates.
There are no prerequisites to take the exams. ITCERTS recommends that candidates have at least six months of work experience in the area that the certification exam covers.
If a candidate does not achieve a passing score on the first attempt, there is no waiting period between the first and the second attempt. If a candidate does not achieve a passing score on the second attempt, the candidate must wait at least 7 days before retaking the exam for a third time. A candidate may not take a given exam any more than three times per year (12 months).
Visit the Online Proctored Exam registration page to find complete instructions.
Training is recommended as part of your certification preparation, but it is not mandatory.
Our exams are currently available in English and Portuguese.
Exams are delivered online (Online Proctored Exams) and can be taken from anywhere in the world.
ITCERTS certifications are considered good-for-life and do not expire.
Your employer can verify your certification on our certification verification page. Your certification number will be needed in order to process the verification.
Subscribe to our newsletter