ISACA CSX Fundamentals
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
ISACA's credentialing navigation lists "Cybersecurity Fundamentals" as a certificate, sitting in the Certificates column alongside entries such as AI Fundamentals, Cloud Fundamentals, Blockchain Fundamentals, IT Audit Fundamentals and IT Risk Fundamentals. This is a different category from ISACA's certifications, which include CISA, CISM, CRISC, CGEIT, CDPSE, CCOA – Certified Cybersecurity Operations Analyst and CCS – Certified Cybersecurity Specialist (Beta). Candidates should note that the legacy CSX Fundamentals page (isaca.org/credentialing/csx-fundamentals) returned a 404 error when checked on 2026-11-06, and no official exam parameters - item count, duration, passing score, fee, or published domain weights - could be confirmed from ISACA's own pages. The navigation also shows ISACA positioning CCS as an early-career cybersecurity certification, which may overlap in audience with a fundamentals-level certificate. Because of this, treat any third-party figure for exam length, price or pass mark with suspicion and verify it against ISACA directly before booking. For preparation, use the official certificate page linked from ISACA's Certificates menu, ISACA's exam preparation resources, and accredited training partners listed in ISACA's partner directories. This page is independent study material and is not affiliated with, endorsed by, or sponsored by ISACA.
What you'll study
About ISACA CSX Fundamentals preparation
Is CSX Fundamentals a certification or a certificate?
ISACA's own credentialing menu lists "Cybersecurity Fundamentals" under Certificates, not Certifications. The certifications column lists CISA, CISM, CRISC, CGEIT, CDPSE, CCOA, CCS (Beta) and others. If certification status matters to your employer, confirm the current classification with ISACA before you invest.
Why can't I open the CSX Fundamentals page?
The URL isaca.org/credentialing/csx-fundamentals returned a 404 when checked on 2026-11-06, so that address is no longer live. Use the "Cybersecurity Fundamentals" link in ISACA's Certificates navigation instead, or search ISACA's site directly, rather than relying on bookmarked or third-party links.
How many questions are on the exam and how long is it?
Not confirmed. No item count, duration, passing score or fee could be sourced from ISACA's pages as of 2026-11-06. Any number you see on a forum or training site may be outdated or invented. Check the official certificate page or contact ISACA support before you schedule.
How hard is a fundamentals-level cybersecurity certificate?
Fundamentals certificates generally assume awareness rather than deep technical depth, but ISACA has not published difficulty data, pass rates or a passing score for this one. Judge readiness by whether you can explain core security concepts clearly and consistently, not by comparing yourself to anecdotal pass claims online.
What should I study first?
Start with the official certificate page to get the current syllabus or exam outline, since domain weights are not published in ISACA's navigation. Then work through ISACA's own exam preparation materials and any accredited training partner content. Build breadth across security concepts before drilling into any single topic area.
Does ISACA offer training for it?
ISACA promotes official exam preparation aligned to its current tests and maintains directories of certification training partners and academic partners. Whether a dedicated course exists for this specific certificate is not confirmed on the pages reviewed, so check the certificate page and the training partner directory before paying for a course.
Which ISACA credential should an early-career person target instead?
ISACA's home page promotes CCS – Certified Cybersecurity Specialist (Beta) as giving "the edge in early-career cybersecurity roles," and CCOA targets cybersecurity operations analysts. Compare CCS, CCOA and the Cybersecurity Fundamentals certificate on ISACA's site, then choose based on the job you want rather than on name recognition.
How do I verify the credential is still active?
ISACA publishes a "Verify a certification" service linked from its credentialing pages. Use it for any ISACA credential you are asked to trust, including a candidate's or a vendor's. Third-party badges and PDF certificates are not a substitute for checking the issuing body's own verification service.
What is the most common preparation mistake?
Relying on stale third-party summaries for exam logistics. ISACA's site changes: pages move, credentials get renamed, beta programs open and close. Confirm format, price and scheduling details on ISACA's own pages close to your test date, and treat undated blog claims about item counts or pass marks as unreliable.