ISACA CSX Fundamentals study guide
ISACA CSX Fundamentals ยท Work through your exam, one topic at a time.
ISACA's credentialing navigation lists "Cybersecurity Fundamentals" as a certificate, sitting in the Certificates column alongside entries such as AI Fundamentals, Cloud Fundamentals, Blockchain Fundamentals, IT Audit Fundamentals and IT Risk Fundamentals. This is a different category from ISACA's certifications, which include CISA, CISM, CRISC, CGEIT, CDPSE, CCOA โ Certified Cybersecurity Operations Analyst and CCS โ Certified Cybersecurity Specialist (Beta). Candidates should note that the legacy CSX Fundamentals page (isaca.org/credentialing/csx-fundamentals) returned a 404 error when checked on 2026-11-06, and no official exam parameters - item count, duration, passing score, fee, or published domain weights - could be confirmed from ISACA's own pages. The navigation also shows ISACA positioning CCS as an early-career cybersecurity certification, which may overlap in audience with a fundamentals-level certificate. Because of this, treat any third-party figure for exam length, price or pass mark with suspicion and verify it against ISACA directly before booking. For preparation, use the official certificate page linked from ISACA's Certificates menu, ISACA's exam preparation resources, and accredited training partners listed in ISACA's partner directories. Topics on this exam: Cybersecurity Fundamentals. The ISACA CSX Fundamentals study guide has 1 section and about 427 words.
01Cybersecurity Fundamentals
Cybersecurity Fundamentals is the entry domain of the CSX Fundamentals exam, and it establishes the vocabulary every later domain assumes. Questions do not ask you to recite definitions; they describe a business situation and expect you to label the element correctly - asset, threat, vulnerability, risk, control - and then classify the control. CIA triad : confidentiality (only authorised parties can read), integrity (data is accurate and unaltered), availability (accessible when needed). Every control should map to at least one of the three.
427 words, about 2 minMore study resources for ISACA CSX Fundamentals
- Practice questionsWhich security principle states that a user should be granted only the minimum access rights needed to perform their job?
- FlashcardsCIA triad. Confidentiality prevents unauthorized disclosure, integrity prevents unauthorized modification, and availability ensures timely access; controls are classified by which property they protect.
- Cheat sheetCIA triad: confidentiality protects against unauthorized disclosure, integrity against unauthorized modification, availability against disruption of access; controls are evaluated by which leg they support.
- Key termsConfidentiality, Integrity, Availability (CIA) Triad. The three core security objectives: confidentiality keeps data from unauthorized disclosure, integrity keeps it accurate and unaltered, and availability keeps it accessible to authorized users when needed.
- Study planDefine the core cybersecurity objectives (confidentiality, integrity, availability) and give one concrete business example of each.
- Common mistakesCandidates memorize control names as a vocabulary list and never map them to the CIA triad objective or the phase (identify, protect, detect, respond, recover) that the stem describes.
- Exam-day guideBring the exact form of identification named in your appointment confirmation.