AP Cybersecurity Reference

What this is. A personal working reference for a brand-new AP course (part of AP Career Kickstart), built to understand what the exam covers and how it's structured — not yet wired into this site's standards catalog/carrier system the way AP CSP is. Units and topic titles are the College Board's own; skill descriptions below are an original paraphrase, not quoted CED text. Source: the official AP Cybersecurity Course and Exam Description (effective Fall 2026).

Status: Course launches fall 2026. First exam: May 2027. No prerequisite — designed as a foundational course aligned with CTE Digital Technology Pathways, built in partnership with CompTIA, Oracle, IBM, and U.S. Bank, and aligned to the NICE Workforce Framework.

College course equivalent	One-semester college intro-to-cybersecurity course
Prerequisites	None. Open to any motivated student willing to work individually and in teams.
Length	Yearlong, ~110 class periods of required content across 5 units (45-minute periods, 5 days/week)
Format	Fully digital exam, delivered in Bluebook
Credential	Qualifying AP Exam score earns an AP Career Kickstart employer-endorsed credential, alongside standard AP college credit/placement

Course Skills

Four skill categories, spiraled across all five units. Each has four progressively deeper sub-skills (A–D). Skill Categories 1–3 are assessed on the exam; Collaborate is developed throughout the course but isn't itself an MCQ/FRQ category.

Skill Category 1	Skill Category 2	Skill Category 3	Skill Category 4
Analyze Risk Size up risk to an organization's assets.	Mitigate Risk Put protective and deterrent security controls in place.	Detect Attacks Stand up detection methods, watch systems, and read the evidence.	Collaborate Work with others, and with AI, to get a task done.
1.A Name the vulnerabilities, threats, and attack methods in play (with or without AI help), and explain how they add up to risk.	2.A Name the security controls that apply, and explain how each one mitigates a risk.	3.A Name what's needed to monitor a system, and explain how that monitoring catches attacks.	4.A Set clear, shared team objectives for a cybersecurity task.
1.B Work out how an adversary could exploit a given vulnerability to compromise an asset.	2.B Pick layered security controls that address a vulnerability.	3.B Work out strategies and methods to detect an attack.	4.B Assign clear roles and responsibilities across a team.
1.C Judge, with or without AI help, how likely a risk is and how bad its impact would be.	2.C Judge, with or without AI help, how well a protective strategy actually reduces risk.	3.C Judge how effective a given detection method is.	4.C Use AI as a collaboration tool, both solo and as a group.
1.D Document, with or without AI help, a risk's likelihood and impact.	2.D Put mitigations in place and log them, with or without AI help.	3.D Detect and classify an attack by analyzing digital evidence, with or without AI help.	4.D Finish your share of a collaborative cybersecurity task.

Exam Format

Section	Type	# Questions	Weighting	Timing
I	Multiple-choice	60	70%	80 minutes
II	Free-response (“Device Security Analysis”)	1	30%	50 minutes

Total time: 2 hours 10 minutes. All five units are assessed on the multiple-choice section, organized by skill rather than by unit:

Skill Category	Approx. MCQ Weighting
1 · Analyze Risk	25–40%
2 · Mitigate Risk	25–40%
3 · Detect Attacks	25–40%

The single free-response question, Device Security Analysis, hands students simulated sources about one device (security policies, firewall configs, file-system permissions, log files) and asks them to find security issues, spot evidence of an attack, and reason about the effect of a configuration or permission change — citing the sources directly. It assesses Skill Categories 2 and 3.

Task verbs used in the free-response question: Identify (surface a concept or piece of evidence), Explain (give a reasoned, evidence-backed account of an outcome), Describe (characterize a process or outcome), Determine (apply criteria/reasoning to the sources to reach a result), Write (express a correct command in print form).