ISACA IT Risk Fundamentals Certificate: exam, cost and domains
The IT Risk Fundamentals Certificate is ISACA’s entry-level credential for identifying, evaluating and responding to IT-related risk. The exam is a 2-hour, online, remotely proctored test that mixes multiple-choice and performance-based questions; you need 65% to pass, there are no prerequisites, and it costs US$175 for ISACA members or US$225 for non-members.
- Credential
- IT Risk Fundamentals Certificate, issued by ISACAISACA certificate page, checked 14 October 2026
- Exam cost
- US$175 for members, US$225 for non-membersISACA certificate page, checked 14 October 2026
- Duration
- 2 hoursISACA certificate page, checked 14 October 2026
- Question types
- Multiple choice plus performance-based questions in a virtual labISACA certificate page, checked 14 October 2026
- Number of questions
- Not stated on ISACA’s current certificate pageISACA certificate page, checked 14 October 2026
- Passing score
- 65% or higherISACA certificate page, checked 14 October 2026
- Delivery
- Online, remotely proctoredISACA certificate page, checked 14 October 2026
- Prerequisites
- NoneISACA certificate page, checked 14 October 2026
- Exam eligibility
- Six months from registrationISACA certificate page, checked 14 October 2026
- Validity
- Not stated by ISACA on the certificate pageISACA certificate page, checked 14 October 2026
Get notified when the IT Risk Fundamentals question bank launches →
Know if you're ready for IT Risk Fundamentals — before you book.
Certsqill measures your IT Risk Fundamentals readiness across every official exam domain — one 0–100 score from coverage, accuracy and consistency that tells you whether to book, keep studying, or sit.
Why people switch to Certsqill
Everything you need to walk in ready
Know where you stand, understand every mistake, and study in your language — one payment, no subscription.
Your IT Risk Fundamentals Readiness Score, not a guess
One number from three signals — coverage, accuracy, and consistency — tells you whether to book the exam or keep studying.
Understand every IT Risk Fundamentals mistake
When you miss a question, it explains why — using your own answer history to catch the patterns you keep repeating. Included, no subscription.
Explanations in your language, questions stay exam-accurate
Get every explanation in your language while the questions stay in exam-accurate English. Technical terms stay in English — the way the exam writes them.
Everything you need to pass
Why you can trust these IT Risk Fundamentals questions
What is the ISACA IT Risk Fundamentals Certificate?
The IT Risk Fundamentals Certificate is an ISACA certificate — not a full certification like CISA or CRISC — that teaches and tests the basics of IT risk: how to identify, evaluate and respond to IT-related risk. ISACA introduced it on 28 October 2020.
ISACA aims it at people new to risk, at teams and individuals who want to upskill, and at risk specialists who want a structured baseline. Its 2020 launch announcement also positioned it as groundwork for the later CRISC certification.
Source: ISACA — IT Risk Fundamentals Certificate. Checked 14 October 2026.
How much does the IT Risk Fundamentals exam cost?
The exam costs US$175 for ISACA members and US$225 for non-members. The US$50 difference is worth weighing against membership if you plan to buy other ISACA products as well.
Once you register, your eligibility runs for six months. Book a date inside that window; an unused registration does not wait for you indefinitely.
Source: ISACA — IT Risk Fundamentals Certificate. Checked 14 October 2026.
IT Risk Fundamentals exam format
The exam is online and remotely proctored, and it lasts two hours. ISACA states that it blends knowledge questions in multiple-choice form with performance-based questions set in a virtual lab environment, so part of the exam asks you to apply risk concepts to a scenario rather than recall a definition.
ISACA’s current page does not give a question count. At launch in 2020 ISACA described a closed-book exam of 75 multiple-choice questions, but the format described today includes performance-based items, so do not plan around the old figure.
Source: ISACA — IT Risk Fundamentals Certificate. Checked 14 October 2026.
IT Risk Fundamentals passing score
To pass, you need a score of 65% or higher. ISACA states the threshold as a plain percentage on the certificate page, so you know exactly what you are aiming for.
Sixty-five percent leaves some room, but not enough to ignore a domain. With 45% of the exam in just two domains — assessment and analysis, and identification — weakness there is hard to make up elsewhere.
Source: ISACA — IT Risk Fundamentals Certificate. Checked 14 October 2026.
IT Risk Fundamentals exam domains
ISACA publishes six domains with fixed weightings. Assessment and analysis carries a quarter of the exam on its own, while the introductory domain is only 5%.
- Risk Assessment and Analysis — 25%
- Risk Identification — 20%
- Risk Monitoring, Reporting and Communication — 20%
- Risk Response — 15%
- Risk Governance and Management — 15%
- Risk Intro and Overview — 5%
Source: ISACA — IT Risk Fundamentals Certificate. Checked 14 October 2026.
Prerequisites for the IT Risk Fundamentals Certificate
There are no prerequisites. You do not need prior work experience, another ISACA credential or ISACA membership to register; membership only changes the price.
That makes it a practical first step for someone moving into risk, audit or security from another field, or for professionals who need to talk to risk teams in their language.
Source: ISACA — IT Risk Fundamentals Certificate. Checked 14 October 2026.
Official IT Risk Fundamentals study materials
ISACA offers two official study options. The online course covers all six domains with video, interactive eLearning modules and downloadable resources; you get access for one year after purchase and earn 12 CPE when you complete it. The study guide is a comprehensive study aid for the exam that also works as a desk reference afterwards.
Exam rules — scheduling, proctoring, scoring and retakes — are set out in ISACA’s Certificate Programs Exam Guide, which covers IT Risk Fundamentals together with ISACA’s other certificate exams. Read it before exam day, especially the remote proctoring requirements.
ISACA also publishes general guides that apply to this exam: a Remote Proctoring Guide, an Exam Registration Guide, a Scheduling Guide and Exam Day Rules. Since the exam runs entirely online, check your room, camera and system against the proctoring guide well before your booked slot rather than on the day.
Source: ISACA — Exam Candidate Guides. Checked 14 October 2026.
How to study for IT Risk Fundamentals
Plan by weighting. Spend most of your time on assessment and analysis, identification, and monitoring and reporting, which together make up 65% of the exam. Then cover response and governance, and leave the 5% overview domain for a final review.
Because part of the exam is performance-based, practise applying each concept: take a scenario, name the risks, rate them, choose a response, and decide how you would report it. Recognising the right term is not the same as using it in a case.
Source: ISACA — IT Risk Fundamentals Certificate. Checked 14 October 2026.
IT Risk Fundamentals vs CRISC
IT Risk Fundamentals is an entry-level certificate with no prerequisites and a US$175 or US$225 exam. CRISC, Certified in Risk and Information Systems Control, is a full ISACA certification: after passing its exam (US$575 for members, US$760 for non-members) you must apply and demonstrate the required work experience, and you have five years from passing to do so.
CRISC’s four domains are corporate IT governance, risk assessment, risk response and reporting, and technology and security — the same ground at professional depth. The certificate is a sensible step if you are building towards CRISC but lack the experience today.
Source: ISACA — CRISC. Checked 14 October 2026.
IT Risk Fundamentals practice questions
Certsqill’s IT Risk Fundamentals practice questions are expert-developed and follow ISACA’s six domains. Every question explains each answer option, so you learn why a risk rating, response or reporting choice is right and why the alternatives miss.
Your readiness score is shown per domain, so you know whether the 25% assessment domain is ready before you spend an exam fee. Certsqill comes with a 7-day money-back guarantee.
IT Risk Fundamentals questions people ask
How much does the ISACA IT Risk Fundamentals Certificate cost?
US$175 for ISACA members and US$225 for non-members. Source: ISACA, checked 14 October 2026.
How long is the IT Risk Fundamentals exam?
Two hours, online and remotely proctored. Source: ISACA, checked 14 October 2026.
What is the passing score?
65% or higher. Source: ISACA IT Risk Fundamentals Certificate page, checked 14 October 2026.
How many questions are on the exam?
ISACA’s current page does not say. The 2020 launch format of 75 multiple-choice questions predates today’s mix with performance-based items. Checked 14 October 2026.
Are there prerequisites for the IT Risk Fundamentals Certificate?
No. ISACA states there are no prerequisites. Checked 14 October 2026.
How long do I have to take the exam after registering?
Six months; eligibility starts at registration. Source: ISACA, checked 14 October 2026.
What study materials does ISACA offer?
An online course with one year of access and 12 CPE on completion, and an official study guide. Source: ISACA, checked 14 October 2026.
Is the IT Risk Fundamentals Certificate the same as CRISC?
No. It is an entry-level certificate without prerequisites; CRISC is a full certification that requires demonstrated work experience. Source: ISACA, checked 14 October 2026.
Does the IT Risk Fundamentals exam include practical tasks?
Yes. ISACA says it blends multiple-choice with performance-based questions in a virtual lab environment. Checked 14 October 2026.
