ITIL 5 Foundation Study Guide: What to Know for the Exam

ITIL 5 Foundation went live on February 12, 2026. The exam is 40 multiple-choice questions in 60 minutes with a 65% passing threshold, which means you need 26 correct answers. PeopleCert doesn't publish pass rates, but it does publish the category weights. Two categories carry 70% of the marks: the ITIL Value System at 40% and key terms and definitions at 30%.

Most of the ideas in ITIL are intuitive if you've worked in IT. The difficulty is terminological. ITIL has its own vocabulary for concepts you already understand, and the exam tests whether you know ITIL's specific word for each one rather than the common one. "Incident" and "problem" mean different things. "Utility" and "warranty" mean different things. Get those backwards and you'll miss questions you otherwise could have answered.

What Changed from ITIL 4 to ITIL 5

ITIL 5 is an evolution of ITIL 4, not a replacement. ITIL 4 is still sold and still examinable, and PeopleCert runs both versions in parallel. If you've studied ITIL 4 material, most of it still applies. The guiding principles and the four dimensions carry forward. Several things were renamed, and the renames are testable.

PeopleCert publishes five ITIL 5 titles, each with its own certification module: ITIL Strategy, ITIL Product, ITIL Service, ITIL Experience, and ITIL Transformation. At the Foundation level you won't be tested on the full depth of these, but you need to know they exist and how they fit together.

The headline addition is the ITIL Product and Service Lifecycle, with eight activities: Discover, Design, Acquire, Build, Transition, Operate, Deliver, and Support. They are not sequential or linear, and the syllabus says so explicitly. It also asks for the purpose of each activity separately, so learn all eight by name and by purpose. AI is the other addition, including AI governance and the ITIL AI Capability Model, which reflect where enterprise IT has moved since ITIL 4 was published in 2019.

Two renames to fix in your notes. What ITIL 4 called the Service Value System is now the ITIL Value System. The four dimensions of service management are now the four dimensions of product and service management. Version 5 says "product and service management" where ITIL 4 said "service management" throughout.

For exam purposes, your ITIL 4 Foundation certification still counts. PeopleCert recognizes it as a prerequisite for all higher-level ITIL 5 modules, so you don't have to retake Foundation to progress. If you want the Version 5 credential without repeating material you already know, there's an optional ITIL Foundation Bridge (Version 5) with a short exam. A first-time candidate can still sit either version, though PeopleCert's current plan is to sunset all ITIL 4 modules on 31 December 2027.

The ITIL Value System

The ITIL Value System, abbreviated ITIL VS, is the big-picture model that holds everything in ITIL together. Think of it as the answer to "how does an organization create value?" It has five components: guiding principles, governance, value chain, management practices, and continual improvement. At 40% of the marks this is the heaviest category on the exam.

The exam asks you to apply the components, not only list them. A typical question describes a company making decisions about a new service and asks which component is most relevant. You need to understand what each one does, not only what it's called.

The Seven Guiding Principles

These are tested heavily. Memorize all seven and be able to recognize each one in a scenario:

  1. Focus on value — Everything the organization does should link back to value for stakeholders. Not just customers; all stakeholders.
  2. Start where you are — Assess the current state before building something new. Don't assume you need to start from scratch.
  3. Progress iteratively with feedback — Work in small increments and use feedback to adjust. Resist the urge to do everything at once.
  4. Collaborate and promote visibility — Silos produce bad outcomes. Share information across teams and stakeholders.
  5. Think and work holistically — No service or practice exists in isolation. Consider the full system.
  6. Keep it simple and practical — If a process step doesn't add value, remove it. Fewer steps beats more steps.
  7. Optimize and automate — Optimize the process first, then automate. Automating a bad process just produces bad results faster.

The order matters. Some exam questions ask about the sequence directly, and the sequence itself is a logical progression: understand value, assess current state, iterate, collaborate, think broadly, simplify, then automate.

Four Dimensions of Product and Service Management

ITIL 5 carries the four dimensions forward from ITIL 4 under a slightly longer name. Every product and service needs to be considered across all four:

  • Organizations and people — Roles, skills, culture, authority structures
  • Information and technology — The data and tools needed to manage services
  • Partners and suppliers — External relationships and contracts
  • Value streams and processes — How work actually gets done, step by step

Exam questions on the four dimensions usually present a scenario and ask which dimension is being described. A question about outdated monitoring software is testing "information and technology." A question about unclear team responsibilities is testing "organizations and people." The syllabus also asks for the external factors that influence all four, under the PESTLE heading: political, economic, social, technology, legal, environmental.

The Value Chain and Value Streams

The value chain is one of the five components of the ITIL Value System, and its activities are what enable the eight lifecycle activities. If you studied ITIL 4, the six-activity chain you memorized (Plan, Improve, Engage, Design & Transition, Obtain/Build, Deliver & Support) is ITIL 4 wording. Those labels are not in the Version 5 Foundation syllabus, so don't carry them into the exam.

What Version 5 does test here is a long list of definitions: product specification, product prototype, incident, event, release, test, continuous integration, continuous delivery, continuous deployment, reliability, site reliability engineering, observability, service request, disaster, problem, error, known error, and operating model. Most of these are new at Foundation level. Learn them as vocabulary.

The distinction between the value chain and a value stream trips up a lot of candidates. The value chain is the set of activities. A value stream is a specific sequence of them for a particular purpose, like resolving an incident or onboarding a new service. Version 5 gives value streams their own category worth 5%: know the difference between a core and an enabling value stream, what value stream mapping and value stream management mean, and the elements of a value stream map.

Management Practices

Version 5 changed what Foundation asks about practices. It no longer walks you through a catalogue. It asks you to define what a management practice is, name the two groups (general management practices, and product and service management practices), explain the role of practices within the ITIL Value System, and explain the structure and benefits of the ITIL Practice Guides. Metric and critical success factor are definitions you need as well.

The total is unchanged at 34 practices, but ITIL 4's three groups became two: the technical management practices group was dissolved and its practices redistributed. Foundation asks for the group names rather than the catalogue, so individual practices such as change enablement and service desk are not named in the Version 5 syllabus.

Incident, Problem, Error, and Known Error

These survive in Version 5 as definitions rather than as practice sections, and the syllabus tests them directly. An incident is an unplanned interruption or reduction in quality of a service. A problem is the underlying cause of one or more incidents. The syllabus also requires event, disaster, error, and known error, and one assessment criterion asks you to distinguish a problem from an error from a known error. Learn all three of those, not only the incident and problem pair.

A server crashes and users can't access email. The unplanned interruption is the incident. The memory leak behind it is the problem. The exam gives you scenarios like this and asks which term applies. If the focus is on restoring service quickly, you're looking at the incident. If the focus is on the underlying cause, you're looking at the problem.

Continual Improvement

This shows up both as a management practice and as a component of the ITIL Value System. The ITIL Continual Improvement Model has seven steps: What is the vision? Where are we now? Where do we want to be? How do we get there? Take action. Did we get there? How do we keep the momentum going? The syllabus asks you to list the steps and to understand them, so learn all seven.

AI, DevOps, and PRINCE2

Two small categories close out the syllabus, worth 2.5% each. The AI category covers definitions of AI, AI maturity, GenAI, and agentic AI, how AI assists across the lifecycle activities and the value chain, AI governance, and the ITIL AI Capability Model. The frameworks category asks how ITIL works alongside DevOps and alongside PRINCE2, and why project management matters in ITIL.

TechPrep ITIL 5

2,350+ practice questions across all 7 exam domains. Explanations for every question distinguish between similar concepts the exam deliberately confuses. Learn more

Key Concepts to Memorize

Some definitions appear on the exam almost verbatim. Know these cold:

  • Service: A means of enabling value co-creation by facilitating outcomes that customers want to achieve, without the customer having to manage specific costs and risks.
  • Utility: The functionality offered by a product or service to meet a particular need. Think "what it does." Also called "fitness for purpose."
  • Warranty: Assurance that a product or service will meet agreed requirements. Think "how well it does it." Also called "fitness for use."
  • Value: The perceived benefits, usefulness, and importance of something. Always co-created between the provider and the consumer.
  • Outcome: A result for a stakeholder enabled by one or more outputs.
  • Output: A tangible or intangible deliverable of an activity.
  • Service level agreement (SLA): Listed in the syllabus as a key concept of service relationships. The practical point the exam rewards: an SLA should be based on outcomes the customer cares about, not internal technical metrics.

The utility/warranty pair is tested in almost every version of the exam. If a question asks about whether a service meets the customer's needs, that's utility. If it asks about availability, capacity, continuity, or security of a service, that's warranty. Both are required for a service to create value.

How to Study

Plan for 15 to 30 hours. That's roughly 2-3 weeks at an hour a day, or one intensive week if you already work in IT service management. The material is wide rather than deep. You're covering a lot of terminology and frameworks at a surface level.

The most effective method is to read through the material once to get the big picture, then switch to practice questions. Every wrong answer on a practice test tells you exactly what to review. Keep a list of terms you confuse and drill those specifically. Flashcards with spaced repetition work well for the vocabulary-heavy content.

Two things to avoid: First, don't study from ITIL 4 material without checking it against the Version 5 syllabus. The renamed models and the retired practice catalogue are where an out-of-date guide will cost you marks. Second, don't rely only on memorization. The exam includes scenario-based questions where you have to apply concepts to a described situation. Understanding why a guiding principle matters is more useful than reciting its name.

Test Day

Sixty minutes for 40 questions gives you 90 seconds per question. That's generous for a multiple-choice exam. If you've prepared, you'll finish with time to spare. Use the extra time to review flagged questions. If you're sitting the exam in a language that isn't your native or working language, you get 25% extra time, which is 75 minutes.

The exam is closed book, administered through PeopleCert. You can take it at a testing center or proctored online from home. If you choose online proctoring, make sure your space meets their requirements: clean desk, working webcam, stable internet connection, no one else in the room.

Every question is multiple choice with four options. PeopleCert uses four styles: standard, missing word, list (pick the two correct statements from four), and occasionally a negatively worded standard question. The list style is the one to slow down for.

Wrong answers don't carry penalties. Never leave a question blank. If you can eliminate one or two options, your odds improve considerably on the remaining choices.

One pattern to watch for: the exam sometimes includes answer options that are true statements but don't answer the specific question being asked. Read the question twice before selecting. "Which guiding principle is MOST relevant" is asking for one best answer, not a list of applicable ones.

Anthony C. Perry

M.S. Computer Science, M.S. Kinesiology. USAF veteran and founder of Meridian Labs. ORCID