CyberCitizen Certification
Why certify in cybersecurity with CyberCitizen?
CyberCitizen is a foundational assessment for digital safety and cybersecurity awareness in educational and professional environments. Widely used to evaluate essential knowledge related to online security, data protection, and responsible digital behavior, CyberCitizen helps establish a common baseline for cybersecurity literacy. A CyberCitizen certification helps students and job seekers demonstrate their proficiency in cybersecurity fundamentals and digital safety practices and supports their academic success and long-term career readiness.
The Tosa CyberCitizen certification measures practical knowledge of cybersecurity fundamentals with no prerequisites. It is well suited for students and adult learners who want to validate their understanding of online safety, data protection, secure digital practices, and responsible use of digital technologies.
Skills Assessed
The Tosa CyberCitizen certification exam evaluates four key domains:
Understanding the Cybersecurity Ecosystem
This domain assesses candidates’ understanding of the cybersecurity ecosystem, including the key roles, organizations, and stakeholders involved in protecting information and systems. It covers the main types of cyberattacks, their targets, motivations, and potential impacts, as well as the principles and procedures for responding to a cyberattack. Candidates are also assessed on their knowledge and use of digital identity and authentication practices, including passwords and multi-factor authentication.
Securing Data, Accounts and Digital Devices
This domain assesses candidates’ ability to secure data, accounts, and digital devices through appropriate security practices. It covers workstation security, including physical and digital protection, secure handling of data, and appropriate responses to unfamiliar individuals in the workplace. Candidates are also assessed on the safe use and protection of removable and external devices, including the secure handling of sensitive data. The domain additionally covers software updates, version management, the use of trusted software sources, and security checks when downloading or installing software.
Adopting Secure Digital Practices
This domain assesses candidates’ ability to adopt secure digital practices when traveling, working remotely, or using devices in unfamiliar environments. It covers the physical and digital security of devices, the protection of data while traveling, and the identification and mitigation of risks associated with new or unknown environments. Candidates are also assessed on their ability to use wireless networks securely and apply appropriate security tools and technologies, including HTTPS, SSL certificates, VPNs, and proxies. The domain additionally covers practices for limiting data exposure and protecting privacy when using digital devices and services.
Protecting Against Cyber Threats and Digital Risks
This domain assesses candidates’ ability to identify and respond to common cyber threats and digital risks in everyday digital interactions. It covers the identification and handling of phishing attempts and the secure use of email and messaging. Candidates are also assessed on the secure management of cloud storage, downloads, external files, and email attachments, including the secure transfer and protection of sensitive files. The domain additionally covers personal data protection and privacy, including the risks associated with sharing personal data online, social media use, and the exercise of data protection rights.
Certification Exam Specifications
Test Format
The Tosa certification for CyberCitizen lasts one hour and uses a 35-question adaptive exam drawn from a pool of more than 90 items, including multiple-choice, interactive, and live in-application tasks. The test evaluates a candidate’s skills and knowledge in the four domains presented above and selects questions from five difficulty levels depending on the abilities of the test taker.
Exam Conditions
Tosa certification exams are not open book. The certification tests must be taken in a secure environment and are proctored at all times in accordance with the Tosa Exam Policy. Adaptive testing produces a unique sequence of items for each candidate, reducing the risk of cheating and item memorization. In-person and remote proctoring options are available.
Validity and Retakes
The certification is valid for 3 years. Earners may retest anytime to improve their score or to maintain their certification. There is a minimum 24-hour waiting period between two retakes. Candidates receive a new version of the test with each attempt.
Score, Proficiency Level, and Award
The result of the exam is a numeric score between 1 and 1000 points associated to a proficiency level. It is calculated using a pattern-scoring model (IRT). The minimum score required to earn the certification is 351. Certification earners receive a Tosa certification diploma that indicates the test date, the score, and the proficiency level achieved. It contains a unique authentication code for online verification. Earners with a score of 551 and above are also eligible to receive a Credly digital badge.
| Score | Proficiency Level | Award |
|---|---|---|
| 1-350 | Beginner | Certificate of Completion |
| 351-550 | Basic | Diploma |
| 551-725 | Productive | Diploma and Credly Digital Badge |
| 726-875 | Advanced | Diploma and Credly Digital Badge |
| 876-1000 | Expert | Diploma and Credly Digital Badge |
Preparing for a Certification Exam
Reaching a productive level or higher typically requires around 150 hours of training and hands-on practice with CyberCitizen, depending on prior knowledge and learning format. To prepare for the Tosa exam, we recommend that learners:
Utilize the Tosa Exam Blueprint
Take a Tosa practice assessment
Each Tosa certification includes two practice assessments to be used as a pre-course assessment and a post-course assessment. The pre-assessment helps determine the initial skill gaps to cover during the course. The post-assessment allows for progress measuring and ensures exam readiness.
Access a free sample of the CyberCitizen practice assessment test.
Complete a Tosa-aligned course
Ready to start certifying?
K-12 Education
Prepare your students for a rapidly evolving world. Equip them with essential digital skills for future academic and career success.
Learn MoreHigher Education
Provide scalable, industry-aligned digital skills assessments, exams, and certifications that prepare your students for the workforce.
Learn MoreAdult/Workforce Education
Upskill current and new employees or trainees with the digital competencies they need to stay competitive in today's evolving workforce.
Learn MoreIndividuals
It's time to stand out with Tosa certifications, the international standard for measuring digital skills. Prove your expertise to employers with verified credentials.
Get Started