Stay ahead of IT Risk with ISACA IT Risk Fundamentals Certificate.

Learn how to identify, evaluate and respond to IT-related risk. Every enterprise experiences risk. ISACA’s IT Risk Fundamentals Certificate and related training are ideal for professionals who wish to learn about risk and information and technology (I&T)-related risk.

Overview

Learn, train and grow with IT Risk Fundamentals.

The IT Risk Fundamentals Certificate Program by ISACA offers a comprehensive understanding of IT risk management principles, methodologies, and best practices. Participants will develop the skills and knowledge needed to identify, assess, mitigate, and manage IT risks in alignment with ISACA’s standards and frameworks.

The IT Risk Fundamentals Certificate covers the principles of IT risk management, the responsibilities and accountability for IT risk, how to build risk awareness and how to communicate risk.

Discover Top ISACA Certifications for Malaysia’s Digital Trust Future: Advance your AI, cybersecurity, audit, governance, risk, and privacy capabilities with ISACA certifications built for the high impact roles organizations need in 2026.

Skills Covered

The ISACA IT Risk Fundamentals Certificate covers the principles of IT risk management, the responsibilities and accountability for IT risk, how to build risk awareness and how to communicate risk. You’ll learn six critical functions as you study for the certificate:

  • Risk Intro and Overview
  • Risk Identification
  • Risk Response
  • Risk Governance and Management
  • Risk Assessment and Analysis
  • Risk Monitoring, Reporting and Communication

Prerequisites

There are no prerequisites required to attend this course.

Target Audience

The “IT Risk Fundamentals Certificate Program by ISACA” is tailored to meet the needs of a diverse range of professionals and individuals interested in IT risk management. The target audience for this program includes:

  • IT Professionals: IT managers, administrators, and technical staff looking to deepen their knowledge of IT risk management and ISACA’s frameworks.
  • Risk Management Professionals: Professionals involved in risk assessment, risk analysis, and enterprise risk management seeking to expand their expertise in IT risk.
  • Compliance Officers: Individuals responsible for ensuring compliance with IT governance standards and regulations who want to align their work with ISACA’s best practices.
  • Auditors: Internal and external auditors interested in enhancing their IT audit and assessment skills following ISACA’s guidelines.
  • Security Professionals: Cybersecurity specialists aiming to gain a broader perspective on risk management and strengthen their cybersecurity strategies.
  • IT Governance Practitioners: Those responsible for establishing and maintaining IT governance practices within organizations and who wish to integrate ISACA’s COBIT framework effectively.
  • IT Leaders and Managers: IT executives and managers interested in establishing a strong foundation in IT risk management and ISACA’s frameworks for improved decision-making.
  • Aspiring IT Risk Managers: Individuals seeking to embark on a career in IT risk management who want to begin with a strong understanding of the fundamentals.

This program is versatile and designed to accommodate both seasoned professionals and individuals new to IT risk management. It provides a comprehensive foundation that is valuable for career advancement and professional development across various IT-related roles and responsibilities.

Course Curriculum

Module 1: Risk Intro and Overview

  • Risk Terminology
  • Business Risk
  • I&T-related Risk
  • Controls

Module 2: Risk Governance and Management

  • Risk Governance
  • Risk Management
  • Positioning Risk
  • Risk Stakeholders, Roles and Culture
  • Risk Communication, Policy, Scope and Workflow

Module 3: Risk Identification

  • Asset Types
  • Asset Classification
  • Asset Valuation
  • Information Asset Valuation
  • Threats
  • Vulnerabilities
  • Likelihood
  • Risk Awareness
  • I&T-related Risk
  • Risk Scenarios

Module 4: Risk Assessment and Analysis

  • Risk Assessment Process
  • Risk Scenario Evaluation
  • Risk Analysis Process, Approaches and Methods
  • Risk Ranking, Prioritization and Aggregation
  • Risk Documentation
  • Control Assessment

Module 5: Risk Response

  • Risk Response and Strategies
  • Control Design and Implementation
  • Incident Management, Business Continuity and Disaster Recovery
  • Risk States
  • Risk Response Selection, Prioritization and Communication

Module 6: Risk Monitoring, Reporting and Communication

  • Risk Monitoring Process
  • Key Risk Indicators
  • Key Performance Indicators
  • Risk and Control Monitoring and Testing
  • Risk Reporting and Communication

Dates & Locations

Let’s make it work for you

Can’t find a date that fits? Need to train your whole team? Looking for a discount?
Speak to one of our learning experts today.

July 13, 2026 - July 14, 2026

Location: Kuala Lumpur
Modal: ILT
Availability: TBC
Exam:
Included
PROMO

July 13, 2026 - July 14, 2026

Location: Online
Modal: VILT
Availability: TBC
Exam:
Included
PROMO

October 5, 2026 - October 6, 2026

Location: Kuala Lumpur
Modal: ILT
Availability: TBC
Exam:
Included
PROMO

October 5, 2026 - October 6, 2026

Location: Online
Modal: VILT
Availability: TBC
Exam:
Included
PROMO
Trainocate exam and cert

Exam & Certification

There are no prerequisites. You can register for the IT Risk Fundamentals exam at any time. The online, remotely proctored 2-hour exam blends both knowledge (multiple choice) and performance-based questions set in a virtual lab environment.

  • No. of Questions: 75 Multiple-choice
  • Exam Length: 2 hours(120 minutes)
  • Passing Score: 65%
  • Exam Languages: English

Training & Certification Guide

Here are five insightful blog posts about ISACA and its cybersecurity certifications. Each one focuses on a different aspect of how ISACA’s training can enhance your cybersecurity career, take a read: 

→ Top ISACA Cybersecurity Certifications 2024 | Career Advancement 

 Incorporating ISACA Certifications into Corporate Training Program 

 ISACA’s CISM vs CRISC: Which Certification Is Right for You? 

 Your Ultimate Guide to the ISACA CISM Certification 

 Become a leader with ISACA: Cybersecurity Leadership 

Frequently Asked Questions

Speak to a Training Consultant

All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631

Preferred mode of training
Checkboxes