thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ISACA · Governance, Risk & Privacy · Entry

ISACA IT Risk Fundamentals Certificate exam guide

Exam ITRF

ISACA's IT Risk Fundamentals Certificate proves you understand how IT risk is identified, assessed, responded to and reported. It is an entry point into IT risk and GRC work and a stepping stone to CRISC.

QuestionsSee official page
Time limit120 minutes
Passing score65%
Exam fee$225 USD
Valid forSee official page
DeliveryOnline, remotely proctored

Format: Multiple choice plus performance-based questions in a virtual lab. Fee note: ISACA member price $175; eligibility lasts six months from registration.

Who it's for

Students, new GRC or audit staff, and IT professionals who need a foundation in IT risk before pursuing CRISC.

What the exam covers

Risk Assessment and Analysis25%
Risk Identification20%
Risk Monitoring, Reporting and Communication20%
Risk Governance and Management15%
Risk Response15%
Risk Intro and Overview5%

Eligibility & prerequisites

Required: None.

Recommended: None required; ISACA's IT Risk Fundamentals online course is the standard preparation.

Keeping it active

ISACA does not list a renewal or CPE requirement for this certificate.

Skills & careers

Skills it validates

  • Identifying IT risk scenarios
  • Qualitative and quantitative risk analysis
  • Selecting risk responses (accept, mitigate, transfer, avoid)
  • Monitoring and reporting key risk indicators
  • Understanding risk governance and appetite
  • Using risk registers

Job roles

IT Risk AnalystGRC AnalystJunior IT AuditorCompliance AnalystRisk and Controls Associate

Where it fits in your path

Take before

No prerequisite certification needed.

You are here

ISACA IT Risk Fundamentals Certificate

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Work through ISACA's IT Risk Fundamentals course domains 1-3.
  2. Week 2: Cover risk response, monitoring and reporting; build a sample risk register.
  3. Week 3: Practise lab-style tasks and the ISACA practice questions.
  4. Week 3: Book once practice scores are consistently above 75%; you can sit 48 hours after paying.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Risk assessment and analysis is the biggest domain at 25%.
  • Expect hands-on lab tasks; practise working with risk registers and scoring.
  • Use ISACA terminology (risk appetite, tolerance, KRI) exactly.
  • You can schedule as soon as 48 hours after paying; book only when practice scores are well above 65%.

Key terms for this exam

All 22 terms Study with thinQcards™

Commonly confused on this exam

Frequently asked questions

How much is the ITRF exam?

$175 for ISACA members and $225 for non-members.

How long is the exam?

2 hours, online and remotely proctored.

Is ITRF a prerequisite for CRISC?

No, but it covers the foundations CRISC builds on.

Does it expire?

ISACA does not list a renewal requirement for this certificate.

Is it worth it?

For new GRC staff it is a cheap, quick way to show risk fundamentals; experienced staff should go straight to CRISC.

Official page: www.isaca.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.