Europe's expert certificate for information security. 5-day online intensive course with DEKRA exam - hosted on German servers, no US-based providers.
What is T.I.S.P.?
The T.I.S.P. (TeleTrusT Information Security Professional) is Europe's counterpart to CISSP - covering the same 20 knowledge domains but with a focus on EU/DACH regulation: GDPR, NIS-2, ISO 27001, and BSI IT-Grundschutz. It is DEKRA-certified and recognised across the DACH region (Germany, Austria, Switzerland).
T.I.S.P. - Europe's Expert Certificate for Information Security
The T.I.S.P. certificate (TeleTrusT Information Security Professional) is a recognised expert-level certificate in information security designed specifically for the European market. It accounts for the standards, frameworks, and legislation prevalent in Europe - unlike comparable international certifications such as CISSP.
As a T.I.S.P. certificate holder, you demonstrate your qualifications, skills, and knowledge across information security, security management, and IT security. The exam is administered by the independent certification body DEKRA.
Why T.I.S.P. instead of CISSP?
While CISSP (Certified Information Systems Security Professional) is oriented around US standards and legislation, T.I.S.P. covers the same 20 knowledge areas - but with a focus on European and German regulation: GDPR, NIS-2, BSI IT-Grundschutz, and ISO 27001. For professionals working in the DACH region, T.I.S.P. is therefore the more relevant and practice-oriented certification.
Your benefits
A recognised European expert certificate for information security - backed by the TeleTrusT association
DEKRA-certified qualification with independent exam administration
Access to the T.I.S.P. community and the annual TeleTrusT Community Meeting
20 modules covering all relevant areas of information security
European and German legislation (GDPR, NIS-2, IT-SiG 2.0) at the forefront
Optimised group size for maximum learning success (max. 15 participants)
Five modules come from our own practice
AWARE7 holds editorial responsibility for 5 of the 20 modules in the
T.I.S.P. curriculum, among them hacking methods,
business continuity management and
incident & emergency response. We wrote this material, and the
same people who wrote it teach it.
What that means for you: in these modules you are not taught from someone else's slide
deck, but from the work the content came out of - penetration tests, incident response
engagements and emergency drills at client sites.
T.I.S.P. Community Meeting 2026 - Chris Wojzechowski as moderator
10-11 November 2026, NH Collection Berlin-Mitte. Chris Wojzechowski co-moderates
the Community Meeting with Nadine Voigt. Silas Borgmeier (AWARE7) delivers a talk:
"Breaking Free from Dependence on US Cloud Services". Attendance counts as a
mandatory requirement for recertification and as 8 hours towards your continuing education quota.
As an AWARE7 graduate, you receive early access to registration and scheduling details.
§38 BSIG (Germany's NIS-2 implementation act) obliges management of affected organisations to
take personal responsibility for cybersecurity measures. The BSI now supervises around 29,500 organisations in Germany
(up from roughly 4,500) - demand for demonstrably qualified ISOs has grown substantially.
T.I.S.P. - with legal foundations under German and European law and BSI IT-Grundschutz
in the curriculum - documents this qualification credibly and vendor-neutrally.
T.I.S.P. compared: the leading IT security certifications
Which certificate suits your situation? This overview helps you decide - especially if you operate in the DACH region.
Criterion
T.I.S.P.
CISSP
CISM
CompTIA Security+
Focus
Europe / DACH
International / USA
Management
Entry-level
Modules / Domains
20 modules
8 domains
4 domains
6 domains
Exam
180 MC, 3 h, German
100-150 CAT, 4 h, English
150 MC, 4 h, English
90 MC, 1.5 h, English/German
Experience required
3 years
5 years (or 4 yr. + degree)
5 years (3 yr. management)
None (2 yr. recommended)
Total cost (course + exam)
approx. €3,560
approx. €3,500-5,000
approx. €2,500-4,000
approx. €1,500-2,500
Validity
3 years + recertification
3 years + CPE
3 years + CPE
3 years + CE
Exam language
German
English
English
English / German
Relevance for DACH
★★★★★
★★★☆☆
★★★★☆
★★☆☆☆
Legal framework DE/EU
✓ Legal foundations
✗ US-focused
Partially
✗ Not included
BSI IT-Grundschutz
✓ Integrated
✗
✗
✗
Curriculum - 5-Day Programme
1
Cryptography & PKI
2
Network & Applications
3
Systems & Cloud
4
Management & Compliance
5
Law & Exam Prep
MoDay 1
Mo1
Foundations, Cryptography & PKI
4 modules · 8 teaching units
Morning · 09-12:30
Foundations & Cryptography
›Security objectives (CIA triad), threats & risks
›Symmetric encryption (AES, 3DES)
›Asymmetric encryption (RSA, ECC)
›Hash functions, digital signatures, post-quantum
Afternoon · 13:30-17
Public Key Infrastructure
›PKI architecture: CA, RA, trust chains
›X.509 certificates, CRL, OCSP
›Key management and key lifecycle
›Practice: TLS/SSL, S/MIME, code signing
TuDay 2
Tu2
Network & Application Security
4 modules · 8 teaching units
Morning · 09-12:30
Network Security
›TCP/IP security and network protocols
›Firewall architectures and IDS/IPS
›VPN: IPsec, SSL-VPN, WireGuard
›WLAN security (WPA3) & Zero Trust (ZTNA)
Afternoon · 13:30-17
Application Security
›Attacker methods & OWASP Top 10
›SQL injection, XSS, CSRF in depth
›Secure Software Development Lifecycle
›API security & microservices
WeDay 3
We3
Systems, Operations & Cloud Security
4 modules · 8 teaching units
Morning · 09-12:30
Malware & Operating Systems
›Malware, ransomware, APTs - taxonomy
›Content security & email security
›Windows hardening & Linux security
›Patch & vulnerability management, EDR
Afternoon · 13:30-17
Virtualisation & Cloud Security
›Hypervisor, Docker, Kubernetes
›IaaS, PaaS, SaaS - shared responsibility
›BSI C5 catalogue & cloud compliance
›MDM & BYOD strategies
ThDay 4
Th4
Security Management & Compliance
4 modules · 8 teaching units
Morning · 09-12:30
Authentication & Standards
›Authentication, authorisation, IAM
›MFA & passwordless methods (FIDO2)
›ISO 27001/27002, BSI IT-Grundschutz
›ISMS setup: policy, risk assessment
Afternoon · 13:30-17
BCM, Awareness & Auditing
›BCM per ISO 22301 & incident response
›SOC - setup and operations
›Security awareness & social engineering
›Security audits & penetration testing
FrDay 5
Fr5
Law, Physical Security & Exam Preparation
4 modules · 8 units · incl. intensive exam preparation
Morning · 09-12:30
Law & Physical Security
›GDPR: TOMs, NIS-2, IT-SiG 2.0
›Sector regulation: KRITIS, DORA, BAIT
›Liability & compliance for management
›Physical security & data centre protection
Afternoon · 13:30-17
Exam Preparation
›ROI, TCO & risk management
›Current threat landscape and trends
›Intensive exam preparation with practice questions
›Exam strategy, time management & Q&A
DEKRA exam · Friday of the following week
180 MC questions · 3 hours · 70% pass threshold · conducted entirely in German
Later exam date available on request
Who is this course for?
The T.I.S.P. certificate course is aimed at experienced professionals working in information security, IT security, and security management who wish to validate their expertise through a European-recognised certification:
Information Security Officers (ISOs) and CISOs - demonstrating professional competence to management and auditors
Information security consultants - differentiation in a competitive market
IT administrators with security responsibilities - career step into security
Data protection officers with an IT security focus - bridging the gap between DPO and ISO roles
IT auditors and compliance managers - professional foundation for audit activities
IT managers - demonstrating competent handling of security responsibilities
Prerequisites
At least 3 years of professional experience in IT security or information security
Theoretical knowledge of IT or information security - evidenced by training certificates, qualifications, or project references
Completion of a five-day T.I.S.P. training course at a TeleTrusT-recognized provider such as AWARE7
Admission requirements are reviewed by DEKRA - we support you with the application process
Certification details
Exam procedure
The T.I.S.P. exam is administered by DEKRA as the independent certification body. DEKRA also reviews admission requirements and issues the certificate.
Format: 180 multiple-choice questions across all 20 modules
Duration: 3 hours (180 minutes; approx. 60 seconds per question on average)
Pass threshold: 70% correct answers (126 out of 180)
Exam fee: €360 net (not included in the course fee)
Retake: Once possible for €250 net without repeating the course
Language: Conducted entirely in German - questions, answers, all exam materials
Exam date at AWARE7
At AWARE7, the exam always takes place on the Friday one week after the final training day.
Example: training ends on 12 Jun → exam on 19 Jun. You are not obliged to take this date -
on request, we coordinate a later exam date with DEKRA for you.
This gives you more preparation time if needed.
Recertification - the complete guide
The T.I.S.P. certificate is valid for 3 years. Recertification extends it by a further 3 years - calculated from the original expiry date, not the application date. No repeat course or exam is required.
Important: observe the deadline
The recertification application must be submitted by the end of the 4th year after the last certification. After this point, renewal is no longer possible - the certificate expires permanently. Plan your recertification well in advance.
Three forms of evidence are required for recertification:
1. Activity record
Description of your professional activities, including the percentage of total working time spent on IT security.
2. Community Meeting
At least one visit to the T.I.S.P. Community Meeting within the last 3 years is mandatory.
The next meeting takes place on 10-11 November 2026 in Berlin - moderated by
Chris Wojzechowski (AWARE7). As an AWARE7 graduate, you receive advance registration details.
3. Continuing education record (average 20 hours per year)
Recognised continuing education includes:
Seminars, workshops, conferences - 8 hours per event day
Additional T.I.S.P. Community Meetings - 8 hours each
Professional publications (articles, books) - up to max. 20 hours
Development of training concepts - up to max. 20 hours
Project documentation with at least 50% personal contribution - up to max. 20 hours
Recognised external training providers include: OMNISECURE, ExperTeach, Fraunhofer SIT/Lernlabor, CAST e.V., isits, secorvo, M&H, and AWARE7's own events.
Important change since June 2024: DEKRA vs. PersCert/TÜV
Since mid-June 2024, PersCert/TÜV Rheinland accepts only isits AG graduates for T.I.S.P. exams and recertification. All other training providers - including AWARE7, secorvo, and M&H - submit both initial and recertification applications exclusively to DEKRA. This change regularly causes confusion among candidates. We are happy to assist you with the correct application process.
Career paths with the T.I.S.P. certificate
The T.I.S.P. certificate opens doors to a variety of career directions:
Information Security Officer (ISO): T.I.S.P. as a recognised qualification - ideal in combination with ISO 27001 Lead Auditor
Security Consultant: Solid foundation for advisory work - complemented by OSCP or OSCE for technical specialisation
CISO / Head of IT Security: Demonstrating strategic and technical competence at leadership level
IT Auditor: T.I.S.P. + ISO 27001 Lead Auditor = the ideal combination for audit work
Data Protection & Security: T.I.S.P. complements CIPP/E or CDPSE at the intersection of DPO and ISO roles
Salary with T.I.S.P. - market overview
T.I.S.P. certificate holders achieve above-average compensation in the German market.
The following overview is based on current salary surveys for IT security roles in the DACH region:
Access to the T.I.S.P. community and the annual TeleTrusT Community Meeting
Listing in the TeleTrusT certificate register as proof of quality
Right to use the T.I.S.P. logo in line with TeleTrusT guidelines (e.g. on your personal website)
Post-course materials and exam simulations from AWARE7
Invitations to Community Meetings and AWARE7 events for recertification credits
Frequently Asked Questions
Who is T.I.S.P. suitable for?
The T.I.S.P. certificate targets experienced information security professionals working in IT security or security management. Typical participants include ISOs (Information Security Officers), CISOs, security consultants, IT auditors, and IT managers. A minimum of three years of professional experience in IT or information security is required.
What are the entry requirements?
Requirements include: at least three years of professional experience in IT or information security, theoretical knowledge in this field (evidenced by diplomas, certificates, or project references), and completion of the one-week T.I.S.P. preparatory course. DEKRA reviews the admission prerequisites - we assist you with the application process.
How does the exam work?
The T.I.S.P. exam is administered by DEKRA as an independent certification body. It consists of 180 multiple-choice questions in 3 hours (180 minutes). A minimum score of 70% (126 out of 180) is required to pass. At AWARE7, the exam is scheduled on the Friday of the week following the last training day - for example, if training ends on 12 Jun, the exam is on 19 Jun. This exam date is optional - on request, we coordinate a later exam date with DEKRA for you.
What is the exam fee?
The exam fee is €360 net (€428.40 including VAT) and is not included in the course fee. If you do not pass, a retake is available for €250 net - without repeating the course.
How long is the certificate valid?
The T.I.S.P. certificate is valid for three years. It can then be renewed for a further three years by demonstrating continuing professional development and ongoing work in IT security. Renewal must be applied for by the end of the fourth year after the last certification - after this deadline, renewal is no longer possible. No repeat of the course or exam is required for recertification.
What distinguishes T.I.S.P. from CISSP?
T.I.S.P. covers essentially the same knowledge areas as CISSP (20 modules vs. 8 domains), but is specifically tailored to the European regulatory environment. T.I.S.P. takes German and European legislation and BSI IT-Grundschutz into account (our course covers GDPR and NIS-2, among others), while CISSP is focused on US standards. For professionals operating in the DACH region, T.I.S.P. is the more relevant and practical choice. Additionally, the T.I.S.P. exam is conducted entirely in German.
Can I combine T.I.S.P. and CISSP?
Yes, the combination is highly recommended. T.I.S.P. provides the European regulatory perspective, CISSP the international recognition. Many of our graduates pursue both certifications. The content overlaps by approximately 70%, meaning the learning effort for the second certification is significantly reduced.
How is the online course delivered?
Our courses run exclusively on a GDPR-compliant platform hosted on German servers - no Zoom, Teams, or other US-based providers. You only need a current browser and a stable internet connection. Live interaction with instructors and fellow participants happens in real time via video, audio, and chat. All course materials are provided digitally.
What is the pass rate?
The pass rate among our participants is well above the industry average. This is due to the intensive exam preparation on the final day, the practice questions provided, and the expertise of our instructors, who know precisely which topics carry the most exam weight.
What is the total cost of T.I.S.P. certification?
Total costs: Course (5 days) at AWARE7: €3,200 net; DEKRA exam fee: €360 net - combined €3,560 net (€4,236.40 gross). Recertification after 3 years does not require a repeat course; the DEKRA recertification fee is €210 net. Exam retake: €250 net without repeating the course. Group discounts for company bookings of 3 or more participants on request.
How does T.I.S.P. recertification work?
Recertification must be applied for at DEKRA by the end of the fourth year after the last certification - after this deadline, renewal is no longer possible. The certificate is extended by 3 years from the original expiry date. No repeat course or exam is required. You must demonstrate: (1) A description of your professional activities, including the percentage of time spent on IT security; (2) Attendance at at least one T.I.S.P. Community Meeting in the last 3 years; (3) Continuing professional development averaging 20 hours per year from recognised activities (seminars/workshops/conferences count as 8 hours per event day, additional Community Meetings as 8 hours, publications up to 20 hours, developing training concepts up to 20 hours, project documentation with at least 50% personal contribution up to 20 hours). Since June 2024: All providers except isits AG submit via DEKRA (no longer via PersCert/TÜV Rheinland).
Which T.I.S.P. training providers exist in Germany?
There are five TeleTrusT-approved training providers: (1) AWARE7 - online, DEKRA exam, max. 15 participants, €3,200 + €360 exam. (2) Fraunhofer SIT - Darmstadt and online, DEKRA exam. (3) isits AG - Bochum and online, TÜV Rheinland (PersCert). (4) secorvo - Karlsruhe, DEKRA, authors of the official T.I.S.P. textbook, €3,140 early-bird + €360 exam. (5) M&H Training - Berlin and online, DEKRA, 10% early-bird discount. Important: Since mid-June 2024, PersCert/TÜV Rheinland only accepts isits graduates - all other providers use DEKRA.
Does T.I.S.P. meet NIS-2 requirements for management training?
Yes. §38 BSIG (Germany's NIS-2 implementation act) obligates management of affected organisations to mandate and monitor cybersecurity measures, with personal liability for failures. T.I.S.P. is a recognised personnel certificate for IT security professionals; the curriculum covers legal foundations under German and European law, BSI IT-Grundschutz, and ISO 27001 - our course also addresses GDPR and NIS-2. With around 29,500 organisations now supervised by the BSI under NIS-2 (up from roughly 4,500), demand for demonstrably qualified ISOs has grown substantially. T.I.S.P.-certified ISOs can document their qualifications reliably to regulators and insurers.
What is the T.I.S.P. Community Meeting?
The T.I.S.P. Community Meeting is the annual professional event for all T.I.S.P. certificate holders, organised by the TeleTrusT association. The next meeting takes place on 10-11 November 2026 at the NH Collection Berlin-Mitte. Attendance counts as a mandatory requirement for recertification (one meeting per 3-year cycle) and as 8 hours towards the continuing education quota. Chris Wojzechowski (AWARE7 CEO) co-moderates the event with Nadine Voigt. Silas Borgmeier (AWARE7) presents a talk: 'Breaking Free from Dependence on US Cloud Services'. As an AWARE7 course participant, you will receive advance information about current Community Meeting dates.
Your Instructors
Experienced experts from research and practice guide you through the certificate course.
M.Sc. in Internet Security (if(is), Westfälische Hochschule). COO and authorized officer (Prokurist) with expertise in information security consulting and security awareness. Junior professor (Nachwuchsprofessur) for Cyber Security at FOM Hochschule, CISO lecturer at isits AG and doctoral candidate at the Graduierteninstitut NRW.
ISO 27001 Lead Auditor (PECB/TÜV) T.I.S.P. (TeleTrusT) ITIL 4 (PeopleCert) BSI IT-Grundschutz-Praktiker (DGI) Ext. ISB (TÜV) BSI CyberRisikoCheck CEH (EC-Council)
Dipl.-Math. (WWU Münster) and doctoral candidate at the Promotionskolleg NRW (Hochschule Rhein-Waal), researching phishing awareness, behavioral security and nudging in IT security. Responsible for building and maintaining ISMS, leads internal audits to ISO/IEC 27001:2022 and advises as an external information security officer (ISB) in KRITIS sectors. Lecturer for Communication Security at Hochschule Rhein-Waal and NIS2 training lead at isits AG.
ISO 27001 Lead Auditor (IRCA) ISB (TÜV) T.I.S.P. (TeleTrusT)
All dates online · Contact us for in-house training
What sets us apart
Five curriculum modules written and taught by AWARE7
Above-average pass rate through intensive exam preparation
Max. 15 participants for focused, interactive learning
GDPR-compliant platform on German servers
Community Meeting access & recertification support
"Thanks to the preparatory training, I had the opportunity to refresh my existing knowledge and pass the exam."
Michael Leinich, IT Security Consultant, Konica Minolta
Sources
Official documents & sources
The binding regulations for T.I.S.P. certification are published by TeleTrusT and DEKRA in
their current versions on their own websites - including the Examination and Certification
Regulations (PZO) for TSP personnel, the fee schedule, the exam registration form with
admission requirements, and the recertification application.
All information on this page follows the DEKRA Examination and Certification Regulations for
TSP personnel (Rev. 02/02/26) and the TeleTrusT fee schedule (2024). The current version of
the linked original documents always prevails.
