Open FAIR Foundation exam-day guide
Open FAIR Foundation · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the original, unexpired ID whose name matches your registration exactly. If your registration name differs (for example, a shortened first name), confirm with the provider before test day whether additional documentation is accepted.
Appointment confirmation and test-taker login details
Have your confirmation email, registration or candidate ID, and any portal credentials accessible. If you registered through a training partner rather than the certification body directly, confirm with the provider which credentials the test platform expects.
Exam delivery format and technical requirements
Confirm whether your sitting is at a test center or remotely proctored, and whether remote delivery requires a webcam, microphone, and a system or bandwidth check in advance. Requirements vary, so confirm with the provider and complete any compatibility check early.
Allowed reference materials
Open FAIR Foundation is a knowledge-level exam, so assume closed-book and plan to recall the taxonomy and formulas from memory. Confirm with the provider whether any reference sheet, calculator, or scratch materials are permitted before relying on them.
Permitted workspace and surroundings
For remote delivery, clear your desk of notes, phones, and second screens, and plan a quiet, private room. Exact rules on scratch paper, water, and room scans differ by provider, so confirm with the provider.
Scheduling and break policy review
Know your start time in the correct time zone, how early to arrive or log in, and whether scheduled or unscheduled breaks are allowed. Confirm with the provider rather than assuming.
Scoring and results policy review
Confirm the passing score, whether results are immediate or delayed, the score report format, and any retake or appeal process. Do not rely on secondhand claims about the cut score.
Core concept review sheet you create yourself
One page of your own notes on the Open FAIR taxonomy: the six risk-factor categories (asset, threat, vulnerability, loss event, loss magnitude, and the actor/action structure), how loss magnitude splits into primary and secondary loss, and the risk-analysis workflow. Writing it yourself is the point; do not plan to bring it into the exam unless the provider allows it.
Timed practice run completed
Do at least one full-length timed practice set under exam conditions so your pacing is calibrated before test day. Use practice material that you have verified is legitimate and aligned to the current syllabus.
Logistics confirmed
Know the test center address and parking or transit plan, or have your remote-proctoring link and a backup internet option ready. Charge devices and have a charger within reach for remote delivery.
Rest and timing plan
Sleep, meals, and arrival buffer are part of preparation. Avoid last-minute cramming of new material in the final hour; review only your own summary sheet.
Provider contact details on hand
Keep the certification body's support contact accessible in case of a technical failure, scheduling problem, or ID issue. Confirm with the provider which channel to use on test day.
Plan the day
Switch from learning to consolidating. Re-read your own summary of the Open FAIR ontology and re-derive the key relationships from memory: how asset, threat, and vulnerability combine into loss-event frequency, and how loss-event frequency and loss magnitude combine into risk. Do one timed practice set and review only the questions you missed, focusing on why the correct answer fits the taxonomy rather than memorizing items.
Verify logistics: confirm your appointment date, time, and time zone; check the test center location or run the remote-proctoring system test; confirm which ID you will present and that the name matches your registration. Resolve any mismatch with the provider now, not on test day.
Do a light review of terminology you tend to confuse, such as the distinction between vulnerability and threat capability, or between primary and secondary loss. Stop studying early enough to sleep well. Prepare your ID, confirmation details, and any permitted items in one place.
Re-read the provider's test-day rules one final time: arrival or login window, permitted items, break policy, and what happens if you are late or disconnected. Confirm with the provider if anything is ambiguous.
Eat, hydrate, and arrive or log in with buffer time. Avoid cramming new concepts. Do a short, calm pass over your own summary sheet only if permitted and only before the exam begins.
Read each question fully and identify which part of the Open FAIR taxonomy it is testing before looking at the options. Watch for qualifiers such as 'primary', 'secondary', 'most likely', and 'best'. Answer every question, flag uncertain ones, and return to them if the platform allows review. Manage the clock: note the number of questions and divide your time, leaving a margin to revisit flagged items.
If a technical problem occurs, note the time and error, and contact the proctor or provider support immediately rather than troubleshooting silently. If you finish early, use remaining time to re-check flagged questions rather than leaving early.
Note your result and, if the provider issues a score report by domain, record which areas were weak for any future retake or advanced study. Confirm with the provider how and when official results and any certificate are delivered.
Rules to check
Present the original, valid, government-issued photo ID whose name matches your registration; if the names differ, confirm with the provider in advance what alternative documentation is accepted.
Assume the exam is closed-book and individual. Do not use notes, search engines, messaging, or another person's help unless the provider explicitly permits a resource; confirm with the provider what is allowed.
Do not communicate with anyone other than the proctor during the exam, and do not share, photograph, or reproduce exam content afterward. Exam content is confidential.
Follow the proctor's instructions on room scans, desk clearance, and permitted items for remote delivery, and on personal items and storage for test-center delivery.
Breaks are governed by the provider's policy and may be unscheduled or unavailable depending on delivery format; confirm with the provider rather than planning on breaks, and note that the clock may keep running.
Scoring is criterion-referenced against a passing standard set by the certification body; confirm the current passing score and result-reporting timeline with the provider rather than relying on secondhand figures.
Arrive or log in within the provider's stated window. Late arrival or a missed appointment may forfeit your fee or require rescheduling; confirm the exact policy with the provider.
If you experience a technical failure or believe there was an exam irregularity, report it to the proctor or provider immediately and follow their documented process; do not attempt to resolve it by restarting or re-entering the exam on your own.