More study resources

About this exam

The MoR Foundation certificate (also written M_o_R Foundation, or Management of Risk Foundation) is an entry-level qualification in the Management of Risk guidance, a framework for identifying, assessing and controlling risk across an organisation's strategic, programme, project and operational activity. It suits project and programme managers, risk managers and risk owners, business change staff, PMO analysts, assurance and audit people, and anyone who needs a shared vocabulary for risk rather than deep quantitative modelling. Expect the exam to test recall and comprehension across the whole guidance: why risk management matters, the principles that underpin it, how an approach is tailored to an organisation, the process steps and the techniques used within them, how risk management is embedded and reviewed, how the perspectives differ, who does what, and how health checks and maturity models are used. Questions are multiple choice and often scenario-flavoured, asking you to pick the best answer rather than the only true one. Preparation works best by reading the official guidance once for the big picture, then working through each process step and perspective with your own examples, and finishing with timed practice so that definitions and role boundaries are automatic. Treat the syllabus published by the awarding body as your checklist.

What you'll study

Common questions

About MoR Foundation preparation

What is the MoR Foundation exam actually testing?

Recall and understanding of the Management of Risk guidance rather than practical experience. You need to know the principles, the structure of the approach, the process steps and their techniques, the perspectives, roles and health-check concepts well enough to choose the best of four options in an unfamiliar scenario.

What format is the exam?

It is a multiple-choice examination delivered in the language of the guidance. The exact number of questions, the time allowed, the pass mark and the delivery options are set by the awarding body and can change, so check the current candidate guidance on its official website before you book.

How hard is it, and how much study does it take?

Most people find it manageable: it is a foundation-level certificate, not an advanced practitioner one. The difficulty is breadth, not depth. Candidates with some project or risk background often need a few weeks of steady reading and practice; those new to the terminology should allow longer and build examples for each concept.

How should I order my study?

Start with the introduction and principles so the vocabulary makes sense, then learn the approach and the process in sequence, because later steps assume earlier ones. Add the perspectives next, then roles and embedding, and finish with health checks and maturity. Practise exam-style questions only after each block, not before.

What trips candidates up most often?

Mixing up roles and accountabilities, especially who owns a risk versus who manages it; confusing the process steps with the techniques used inside them; and treating the perspectives as separate processes rather than different lenses on the same process. Another common slip is answering from personal workplace habit instead of the guidance.

Can I retake it if I fail?

Retake arrangements, waiting periods and any restrictions are set by the awarding body and its accredited training providers, and they differ by country and by whether you booked through a provider or directly. Confirm the current policy with the organisation you book through before paying.

Do I need to take a training course?

Not necessarily. Many candidates self-study from the official guidance and syllabus. A course helps mainly with structure, worked examples and exam technique. If you self-study, get the current edition of the guidance and the published syllabus, and use practice questions to check your understanding rather than to memorise answers.

How long is the certificate valid?

The guidance evolves and the awarding body sets any re-certification or continued-development requirements. Rather than assume a fixed validity period, check the current rules on the official website and keep a record of your certificate in case an employer asks for evidence.

How do I know if I am ready to book?

You should be able to explain each process step, name the techniques associated with it, distinguish the perspectives and describe the main roles without notes. If practice questions consistently feel comfortable and you can justify why wrong options are wrong, you are probably ready.