CPSP Certified Phishing Simulation Pro

The CPSP Certified Phishing Simulation Professional exam is an (ISC)2 certification that validates expertise in managing phishing simulation campaigns to strengthen human resilience against email and social engineering-based cyberattacks. It focuses specifically on managing an organizational phishing simulation program. This certification exam tests your knowledge of use cases, legal/ethical concerns, technical setup, reporting, and integrating simulations into a larger awareness program. The CPSP also tests your knowledge and skills related to running effective phishing simulation campaigns to train employees to identify and report phishing attacks.

This certification is Intended for security awareness professionals, SOC analysts, incident response teams overseeing phishing programs. By earning the CPSP certification, professionals demonstrate specialized skills for building impactful phishing simulations while prioritizing ethics and learning. It complements awareness certifications like the CSAP to reduce organizational risk.

The CPSP Certified Phishing Simulation Professional exam is ideally suited for various professionals responsible for managing phishing testing campaigns within organizations, including:

• Security awareness program managers - CPSP complements existing awareness certs by validating skills to deliver effective phishing simulations.
• Security administrators/analysts - Certification proves capabilities to create and measure phishing templates inoculating against emerging social engineering tactics.
• Incident response team members - Highlights expertise to leverage simulations for better email attack preparedness through post-phishing response assessment.
• Compliance officers - Demonstrates knowledge of regulations around ethical phishing testing methods required for many industries.
• Managed security service providers - Displays proficiencies to advise clients on running phishing simulations tailored to risks.

This exam consists of 60 questions. You have 3 hours to complete the exam. To pass the exam, you must score at least 70%.

Topics include:

• Technology & Tools
• Responding to Phishing Simulations
• Phishing Fundamentals
• Phishing Education & Training
• Measuring Phishing Risk
• Developing Phishing Threat Intelligence
• Ethics of Phishing Simulations
• Designing Phishing Simulations
• Compliance Considerations
• Deploying Phishing Simulations

What is the CPSP exam?
The CPSP exam is a certification exam offered by the Phishing Simulation Advisory Board (PSAB) to validate the knowledge and skills of professionals who design, implement, and manage phishing simulation programs for organizations.

What topics are covered in the CPSP exam?
The CPSP exam covers a range of topics related to phishing simulation, including phishing techniques, psychology of phishing, phishing simulation program design, training and awareness, legal and ethical considerations, and program management and reporting.

Who is eligible to take the CPSP exam?
To be eligible for the CPSP exam, candidates must have at least two years of experience in information security, with at least one year of experience in phishing simulation or security awareness training.

How long is the CPSP exam?
The CPSP exam is a 60-question, multiple-choice exam that must be completed within 3 hours.

What is the passing score for the CPSP exam?
To pass the CPSP exam, candidates must achieve a score of at least 70%.

How much does it cost to take the CPSP exam?
The cost to take the CPSP exam is $395 for PSAB members and $495 for non-members.

How can I prepare for the CPSP exam?
To prepare for the CPSP exam, candidates can use a variety of study resources, including the official CPSP study guide, online courses, practice exams (ours!), and real-world experience in phishing simulation and security awareness training.

How often is the CPSP exam offered?
The CPSP exam is offered year-round through online proctoring, which allows candidates to take the exam from their own computer at a time and place convenient for them.

What happens if I fail the CPSP exam?
If a candidate fails the CPSP exam, they can retake the exam after a waiting period of 30 days. Candidates must pay the full exam fee for each attempt.

How long is the CPSP certification valid?
The CPSP certification is valid for three years from the date of passing the exam. To maintain their certification, CPSPs must complete 30 continuing education credits (CECs) every three years and pay an annual maintenance fee.

What is the format of the CPSP exam questions?
The CPSP exam consists of multiple-choice questions that test the candidate's knowledge and understanding of phishing simulation concepts and best practices. The questions may include scenarios or case studies that require the candidate to apply their knowledge to real-world situations.

Is the CPSP exam open book?
No, the CPSP exam is not open book. Candidates are not allowed to use any reference materials or aids during the exam.

Can I reschedule or cancel my CPSP exam?
Yes, candidates can reschedule or cancel their CPSP exam appointment up to 48 hours before the scheduled exam time. Rescheduling or cancellation fees may apply, depending on the timing of the request.

How long does it take to receive CPSP exam results?
CPSP exam results are typically available immediately after completing the exam. Candidates will receive an email with their official score report within 5 business days of the exam date.

Is the CPSP certification recognized globally?
Yes, the CPSP certification is recognized globally as a standard for phishing simulation and security awareness training professionals. It demonstrates a candidate's expertise and commitment to best practices in this field.

Are there any prerequisites for the CPSP certification?
While there are no formal prerequisites for the CPSP certification, candidates are expected to have a solid foundation in information security concepts and practices, as well as practical experience in phishing simulation or security awareness training.

How does the CPSP certification benefit my career?
The CPSP certification can benefit your career by demonstrating your expertise and credibility in phishing simulation and security awareness training. It can help you stand out in the job market, advance your career, and potentially earn a higher salary.

Are there any continuing education requirements for maintaining the CPSP certification?
Yes, to maintain the CPSP certification, candidates must complete 30 continuing education credits (CECs) every three years. CECs can be earned through a variety of activities, such as attending conferences, completing online courses, or publishing research