Open FAIR Foundation
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Open FAIR Foundation credential is a knowledge-based certification in risk analysis offered within The Open Group's Open FAIR certification portfolio, which the source describes as "Risk Analysis - Open FAIR™ Certification." It is aimed at professionals who need to understand and communicate risk in quantitative, business-relevant terms - risk analysts, security and IT risk managers, architects, and consultants who support decision-makers. The exam tests comprehension of the Open FAIR body of knowledge: how risk is defined and scoped, how loss event frequency and loss magnitude combine into risk, and how analysis results are normalized so they can be compared and used consistently across an organization. Foundation-level certification sits at the remembering and understanding levels of Bloom's taxonomy, so preparation should emphasize precise terminology, the relationships between the model's components, and the ability to interpret simple risk scenarios rather than perform advanced quantitative modeling. A practical study path is to read the relevant Open FAIR publications, work through the terminology until you can define each factor without notes, then test yourself on scenario-based questions that ask you to identify which part of the model a situation describes. This page is an independent study resource and is not affiliated with, endorsed by, or sponsored by The Open Group; always confirm exam logistics, current syllabus, and registration details with the official certification pages before booking.
What you'll study
About Open FAIR Foundation preparation
Who publishes the Open FAIR Foundation exam?
It is part of The Open Group's Open FAIR certification portfolio, listed on their site as "Risk Analysis - Open FAIR™ Certification." Registration, scheduling, and pricing are handled through The Open Group and its accredited training providers. This site is an independent study aid and has no official affiliation.
What does the Foundation level actually test?
Foundation-level certifications are positioned at the first two levels of Bloom's taxonomy - remembering and understanding. Expect questions on definitions, the components of the risk model, and how those components relate, rather than complex quantitative derivation. If you can explain each term in your own words and place it correctly in the model, you are on track.
How should I sequence my study?
Start with terminology and the overall risk taxonomy, because almost every later question depends on precise word meanings. Then study how loss event frequency and loss magnitude are characterized, and finally how they combine into a risk statement. Leave practice questions until after the terminology is solid; guessing at terms early builds bad habits.
What are the most common failure modes?
Candidates typically lose marks by confusing adjacent concepts - mixing up the factors that drive frequency with those that drive magnitude, or treating a control as a risk reducer without identifying which factor it changes. Another frequent error is answering from general security intuition instead of the framework's own definitions. Read each stem for the specific term being asked about.
Is the exam difficult?
Difficulty is subjective and The Open Group does not publish a pass rate in the material available here. The content is conceptual rather than mathematical, so most candidates who study the source publications carefully and drill terminology thoroughly report feeling prepared. Candidates who rely on prior risk-management experience alone often find the framework's specific vocabulary the hardest part.
How long is the exam and how many questions?
Those details are not stated in the source material available to us, so we do not publish figures. Check the official Open FAIR certification pages and the exam handbook before you schedule, since format and duration are set by The Open Group and can change between revisions.
What does it cost and can I retake it?
Fees and retake rules are not given in the source material we hold, so we do not quote them. Pricing, retake policy, and any waiting period are defined by The Open Group and are usually covered in their certification FAQ. Confirm directly with them before budgeting, and check whether your training provider bundles an exam voucher.
How long is the certification valid?
The source material does not state a validity period, so we do not publish one. Some Open Group credentials are tied to a specific version of the body of knowledge and may be updated when a new version is released. Check the official program FAQ for the current recertification or version-upgrade position.
Does this page replace official documentation?
No. Use it to orient yourself and to practise recall, but treat The Open Group's own publications and certification pages as authoritative for syllabus scope, exam rules, and any program changes. Where this page is silent on a number or policy, that is deliberate - we only publish what we can verify.