Available languages : English, French
Version(s) : CyberCitizen, CyberCitizen Junior (for K-12 students)

Cybercrime is expected to cost the world $10.5 trillion USD by 2025. Be prepared for anything, from what to do during a cyber-attack to security at home, at work, and on the move, by choosing a certification from a trusted, industry-recognized name with international appeal: Tosa.

The Tosa CyberCitizen certification determines and validates a candidate’s proficiency and skill level in cyber responsibility and cyber awareness for everyday internet users. The Tosa CyberCitizen certification supports students, trainees, employees, or jobseekers in their employment, professional, or academic objectives.

There are no eligibility requirements to take a Tosa certification exam, though Tosa offers two distinct certification exams: CyberCitizen and CyberCitizen Junior. CyberCitizen tests cybersecurity knowledge in the context of the work environment, such as what to do in the event of a cyber-attack or electronic security breach, while CyberCitizen Junior tests general cybersecurity knowledge, such as identifying phishing emails, using VPNs, and creating strong passwords.

In K-12, we recommend using Tosa CyberCitizen Junior certifications as part of a course or curriculum starting at grade 6. For postsecondary students and professionals, we recommend our standard Tosa CyberCitizen certification.

Looking for a pre-employment test on CyberCitizen? Please visit Isograd Testing Services website.

Tosa assessments and certification exams on CyberCitizen (CyberCitizen & CyberCitizen Junior)

Assessments are not required to be proctored when taken remotely, while certification exams must be taken in-person or via our remote proctoring solution.

Assessment test Certification exam
Number of questions 25 35
Duration 40min 60min
Exam protocol Taken online Taken online under proctored conditions, in-person or via our remote proctoring system
Results Skill level on a 1 to 5 scale. Detailed skills reports Score on a 1 to 1000 scale. Diploma delivered within 5 business days

Skills Badging with Credly

We partnered with Credly to help our earners share their new certification, and the skill set associated with it, on their resumes, CVs, or professional social media profiles. You can earn a skills certification badge from Credly when you score "Productive" level or higher on the Tosa CyberCitizen Certification Exam or the Tosa CyberCitizen Junior Certification Exam.

Available Badges for CyberCitizen

Skill Domains Assessed

The cybersecurity world

The candidate will be tested on their knowledge of the different cyber security players and their roles: the attackers and their targets, the key people to contact within a company, the public players. This domain also covers knowledge of the main types of attack (vectors, targets, potential impacts), and the knowledge and skills related to digital identity and authentication.

Security in the workplace

The candidate should demonstrate their ability to secure their data and devices in the workplace by identifying data exposure on a workstation and limit them, handling removable devices and external storage, recognize the main social engineering attack techniques and know how to protect data and people from the human factor. Questions also cover updating software and downloading from trusted sources.

Security on the move

The candidate is assessed on their ability to travel and work in an external environment securely, by physically securing the access to their terminals, safely use and protect data on their smartphones, and using the correct tools and techniques to securely use a wireless network. The questions also assess their ability to limit the data exposed during an external trip.

Security at home

The questions of this domain cover the essential cyber security risks, tools and behaviors while being at home or working remotely. The candidate is tested on their ability to recognize a phishing attempt and take the proper action, to use cloud storage and backups, and to securely handle external files. They will also be tested on their awareness of the risks related to their personal data exposure and their ability to protect their privacy.

Certification Exam Detail

The Tosa CyberCitizen Certification Exam relies on a database of more than 140 questions. It is composed of a mix of 35 questions, including multiple-choice, interactive, and live in-the-application questions, and lasts 1 hour. The algorithm adapts to each answer of the candidates to adjust the difficulty level of the questions until they reach the exact definition of the candidates’ level by calculating the limit of their skills. Candidates receive a numeric score out of 1000 points associated to a proficiency level on a five-level scale. Candidates who score between 1 and 350 points don't earn the certification. They will not receive a diploma but a certificate of completion. Candidates who score 351 points or above earn the certification. They will receive a diploma by email within five (5) business days . If candidates score 551 points or above, they will also be eligible to receive a Credly digital badge.

The Tosa CyberCitizen Certification Exam is valid for three (3) years. Once expired, earners must retake the certification to maintain it over time. Earners wishing to demonstrate skills development and personal growth may re-take the exam to improve their score at any time. There is no waiting period between two attempts.

Rules & Technical Requirements

Tosa certifications must be taken under specific proctoring conditions. For more information about Tosa certification exam rules and technical requirements, please visit our dedicated exam policies page or consult the downloadable PDFs below.

Tosa Certification Exam Technical Requirements (PDF) Tosa Certification Exam Rules (PDF)

Prepare For Your Certification Exam

In order to be well prepared for your exam day, we recommend:

  • Taking at least one Tosa assessment test prior to your exam
    The Tosa assessment test, like the certification exam, is an adaptive test composed of a mix of multiple-choice, interactive, and live in-the-application questions. It contains 25 questions and lasts 40 minutes. It does not need to be taken under proctored conditions. Results are delivered on the same 1-to-5 proficiency level scale and includes detailed skills reports to help determine student or candidate strengths and weaknesses before taking the certification exam.
  • Utilizing the free practice tests available on our website
    In addition to our Tosa assessment tests, we offer short practice tests for free. Simply navigate to and click on the “Free practice test” button on the top right of the page, then select which test subject you’d like to practice.
  • Taking a Tosa-aligned course
    We have partnered with several eLearning providers and publishers to provide online courses that align with the Tosa certification objectives. To achieve a productive level or higher for a Tosa certification, it requires candidates an average of 150 hours of training and hands-on experience with CyberCitizen. This average training time depends on their pre-existing skills or knowledge, the expected outcome for the certification (score/level), and the provider.

Need more details ?