The beginnings of Open FAIR™ 2 Foundation Certification
In 2007, the Factor Analysis of Information Risk (FAIR) was introduced to The Open Group. The Open Group is a consensus-based member organization that creates open standards and publishes best practices for in the fields of Security and Risk. In 2009, the Open Group first published the first version of the Risk Taxonomy Standard (O-RT). In 2012, the Risk Analysis Standard (O-RA) was published. These two standards are called the Open FAIR™Body of Knowledge.
The FAIR Body of Knowledge is a tool for professionals to learn how they can perform rigorous and consistent risk analyses. The Body of Knowledge also helps risk professionals evaluate the efficacy of a risk assessment and analysis model.
In 2013, the Open FAIR™ Certification program was launched. Since 2024, the Open FAIR™ 2 Foundation Exam has been offered to validate a candidate’s knowledge and understanding of the FAIR Body of Knowledge.
Open FAIR 2 Certification advantages
FAIR certification validates a professionals understanding and knowledge of the FAIR framework and methodology. Some of the concepts that are tested by the exam are:
- Understanding of the FAIR taxonomy and how factors are related
- How to perform consistent and defensible risk analyses
- How to take an organizational view of risk
- How to defend your results
Who will benefit from FAIR™ 2 Foundation certification?
- Senior-level executives
- Professionals working in information system security and operations
- Risk analysts
- Decision-makers
- Anyone interested in probabilistic risk analysis models
Discover C-Risk Education's e-Learning Platform
Gain a detailed understanding of the FAIR taxonomy and analysis methodology. Learn how quantification can improve your infosec budget decisions and communication with critical stakeholders.
FAIR™ 2 Foundation exam basic information
Candidates should have a solid understanding of the FAIR terminology and taxonomy, the basics of risk analysis as part of risk management, and how to interpret results.
Testing location: Pearson VUE testing centres or online proctored exam
Prerequisites: None
Exam Type: Simple Multiple Choice
Number of questions: 40
PassingScore: 60% (24 out of 40 questions)
Duration: Candidates are given 1 hour to complete the exam. If English is not your native language, you can be granted extra time.
Re-takePolicy: If you fail the exam, you must wait one month before taking another attempt
C-Risk Education can help you prepare
C-Risk Education is an accredited Open FAIR training organization. We provide valuable support to risk professionals aiming to pass the FAIR™ certification exam. Our instructor-led courses offer a strong foundation in FAIR™ concepts, ensuring a solid grasp of the taxonomy and analysis methodology essential for success. C-Risk’s two-day training course for practitioners, led by cybersecurity and risk management experts, equips risk professionals with practical skills to apply quantitative, data-driven risk management techniques based on the FAIR™ Body of Knowledge. This course also includes dedicated time to work on case studies, helping to refine and deepen your expertise.
Additionally, C-Risk offers a self-paced, interactive e-learning course, "Data-Driven Cyber Risk Management for Practitioners," which is another excellent resource to prepare for the Open FAIR™ 2 Foundation certification exam. Schedule a call to learn more!
We build scalable solutions to quantify cyber risk in financial terms so organizations can make informed decisions to improve governance and resilience.
