PECB ISO/IEC 38500 Foundation Exam Practice & IT Governance Study Guide
PECB ISO/IEC 38500 Foundation
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The PECB Certified ISO/IEC 38500 Foundation certificate is an entry-level credential in the governance of IT. The course behind it introduces the core principles, model and framework of governance of IT as set out in ISO/IEC 38500:2024, and shows how organizations govern their use of IT, digital capabilities and data in a responsible, effective and ethical way. It suits managers and consultants who need the basic concepts, people involved in digital transformation, compliance or IT initiatives, professionals moving into governance, risk or IT management roles, and advisers who want a structured foundation before deeper certification.
There are no prerequisites. The agenda runs two days: day one covers introduction to ISO/IEC 38500, governance of IT and the principles; day two covers the model and framework plus the certificate exam. The exam is multiple choice and closed book, and it covers two competency domains - fundamental concepts and principles of governance of IT, and the model and framework for the governance of IT.
To be certified you pass the exam, need no professional, audit or project experience, and sign the PECB Code of Ethics. Training materials exceed 200 pages and completion earns 14 CPD credits. Expect roughly equal coverage of both domains.
What you'll study
About PECB ISO/IEC 38500 Foundation Exam Practice & IT Governance Study Guide preparation
What format is the ISO/IEC 38500 Foundation exam?
Multiple choice and closed book. PECB states that Foundation and Transition exams are usually of this type, so no reference materials, notes or dictionaries are allowed. In the online delivery the exam runs in the PECB Exams application, is supervised remotely by an invigilator through a camera, and phones or tablets may not be used during the session.
How many questions are there, how long is it, and what is the pass mark?
The ISO/IEC 38500 Foundation course page does not publish the item count, duration or passing score. PECB directs candidates to the List of PECB Exams and the Examination Rules and Policies for exam-specific details. Confirm those figures on the current exam list before you build timed practice runs, and treat third-party numbers as unverified.
Which domains does the exam cover and how heavily is each weighted?
Two competency domains: Domain 1, fundamental concepts and principles of governance of IT, and Domain 2, model and framework for the governance of IT. No per-domain weighting is published, so study both to a similar depth, following the two-day agenda where day one covers concepts and principles and day two the model and framework.
What happens if I fail the first attempt?
There is no limit on the number of retakes, but after failing the first attempt you must wait 15 days after the initial exam date before the retake. Candidates who took the course with a PECB partner and failed the first attempt can retake free within a 12-month period from the date the coupon code is received; otherwise retake fees apply.
Do I have to attend a training course to sit the exam?
PECB states there are no prerequisites to participate in the course, and generally no specific curriculum is required for certification exams. The exception is the Foundation Certificate Program, where attending the training course is part of the certificate requirements. Beyond passing the exam, no professional, audit or project experience is needed, but you sign the PECB Code of Ethics.
How and when are results released?
For multiple-choice exams candidates see their exact grade instantly after submitting and are told whether they passed; results are also sent by email, with the communication window running two to four weeks from the exam date. Failing candidates receive a list of the domains where they performed poorly. If you disagree, you have 30 days from receiving the results to file an appeal.
Can I get extra time if the exam is not in my native language?
Yes. PECB provides 10 additional minutes for Foundation exams to candidates taking the exam in a non-native language, but it must be requested on the day of the exam rather than assumed automatically. Ask the invigilator or exam administrator on the day so the allowance is applied to your session, and plan your pacing on the assumption it may not be available.
In what order should I study the material?
Follow the course agenda: day one for ISO/IEC 38500 basics, governance of IT and the principles; day two for the model and framework. Because both domains are examined with no published weighting, revise them together rather than leaving the framework until the final night. The quizzes built into the course closely mirror the certification exam.
What must I do on and before exam day?
Be present at least 30 minutes before the exam starts; late candidates get no compensating time and may be refused. Bring a valid national ID card, driver's licence or passport. For online exams, PECB highly recommends opening the PECB Online Examinee Guide and checking technical requirements at least 48 hours in advance.
Does the Foundation certificate lead anywhere else?
PECB lists ISO/IEC 38500 IT Corporate Governance Manager and Lead IT Corporate Governance Manager alongside the Foundation course, so Foundation is the entry point of that ISO/IEC 38500 ladder. Completion also earns an attestation worth 14 CPD credits, with materials running to more than 200 pages, which supports later Manager-level study.