IT Risk Fundamentals

The IT Risk Fundamentals certificate is ISACA's entry-level credential for professionals beginning their journey in IT risk management. It covers the core vocabulary, concepts, and processes used to identify, assess, and respond to IT risks in an organizational context. This certificate is ideal for early-career professionals and those transitioning into risk-focused roles who want a structured foundation before pursuing advanced credentials like CRISC.

Request Training Email Inquiry

What is the IT Risk Fundamentals Certificate?

Who Should Take This Course?

Entry-level IT professionals exploring risk management
Business analysts and project coordinators new to IT risk
IT Support and Operations staff building risk awareness
Students and graduates entering cybersecurity or IT governance
Professionals preparing for the CRISC certification
HR and compliance staff needing foundational IT risk literacy
Team leads in technology-dependent business functions

What You Will Learn in the ITRF Course

A comprehensive curriculum covering all exam objectives with hands-on labs and real-world practice.

Module 1: IT Risk Concepts and Terminology

Build a solid foundation in IT risk language and core principles.

Definition of risk, threat, vulnerability, and impact
Risk appetite, risk tolerance, and risk capacity
Types of IT risk: operational, compliance, strategic
Risk ownership and accountability in organizations

Module 2: Risk Identification

Learn methods to identify IT risks within business environments.

Asset identification and classification
Threat modeling and vulnerability scanning basics
Risk scenario development
Using risk registers and risk inventories

Module 3: Risk Assessment and Evaluation

Assess and prioritize IT risks using structured methodologies.

Qualitative risk assessment approaches
Likelihood and impact matrices
Inherent vs. residual risk concepts
Risk prioritization and reporting to stakeholders

Module 4: Risk Response

Understand risk treatment options and basic response strategies.

Risk treatment: accept, avoid, mitigate, transfer
Selecting and implementing basic controls
Risk monitoring and key risk indicators
Introduction to business continuity concepts

Course Prerequisites

Pre-requisites training is free when you purchase the course from ProSupport

No formal prerequisites — suitable for all experience levels
Basic familiarity with IT operations or business processes is helpful
No work experience requirement for the certificate

Exam Information

Everything you need to know about the ITRF certification exam.

Exam Component	Details
Exam Name	IT Risk Fundamentals
Exam Code	ITRF
Exam Type	Multiple Choice
Total Questions	50
Passing Score	65% (33 out of 50)
Exam Duration	60 minutes
Language	English
Exam Provider	ISACA Online Proctoring
Exam Focus	Foundational IT risk concepts, identification, assessment, and response
Exam Registration	ISACA portal (isaca.org/credentialing/certificates)
Retake Policy	No mandatory waiting period; re-registration required
Certification Validity	No expiry — foundational certificate