The decay heat-driven temperature transients of the in-vessel components following a postulated loss of all in-vessel cooling have been calculated. The resulting time-dependent heat load to the vacuum vessel is due to radiation from the backplate and convection of postulated steam between backplate and vacuum vessel. It is shown, that even for a failure of all in-vessel cooling and total loss of power, the ITER design can rely on passive decay heat removal by natural circulation in one of the two existing cooling loops of the vacuum vessel. A mathematical model describes the transient operating conditions and shows that the temperature established by natural circulation does not exceed 200°C at the maximum shut down heat load to the vacuum vessel. Therefore, no additional emergency cooling system is required if the existing heat exchanger is designed for natural circulation and a bypass is used during normal operation to maintain operation temperature.