CQI/IRCA ISMS Lead Auditor exam-day guide
CQI/IRCA ISMS Lead Auditor · Prepare for the day ahead.
Your checklist
Photo ID
Passport or government-issued photo driving licence, with the name exactly matching your course/exam registration. Confirm with the provider which ID types it accepts and whether a digital or expired ID is acceptable.
Exam confirmation and joining instructions
Bring the provider's confirmation email, your candidate/reference number, and the venue address or online proctoring link. Save an offline copy on paper in case your phone is collected.
Written confirmation of the exam format
Ask the provider in advance: number of questions, marks per question, total duration, pass mark, and whether the exam is open or closed book. Do not assume you may bring ISO/IEC 27001 or ISO 19011 into the room - confirm with the provider.
Two working pens plus a spare
Written exams are usually handwritten; test both pens beforehand. Add a pencil, eraser and a small ruler if you like ruled underlining. Highlighter only if the provider permits annotating the question paper - confirm with the provider.
A plain non-smart wristwatch
Exam room clocks are not always visible and phones will be unavailable. A simple analogue or digital watch is the safest way to manage your time per question.
Water in a clear container
Check whether drinks are permitted at your venue; some centres only allow clear bottles with labels removed.
Your own condensed revision notes
A one- or two-page summary (clause structure of ISO/IEC 27001 clauses 4–10, Annex A theme groupings, audit principles, corrective-action flow, risk and sampling concepts) for reading in the corridor before you go in. Leave it outside the exam room.
Access arrangements confirmation
If you need extra time, a separate room, a permitted dictionary, or rest breaks, arrange and confirm this with the provider well before exam day and bring the written approval.
Travel or system-check plan
For a physical venue: route, parking, and arrival 30–45 minutes early. For remote proctoring: run the platform's equipment/system test, check camera, microphone, browser and a stable connection the day before, and clear your desk area.
Reading glasses and a light snack
Take whatever you need to read small handwriting for two hours; keep a snack and drink for afterwards, since food is normally not allowed at the desk.
Plan the day
Get the exam logistics and format confirmed in writing by the provider (duration, questions, marks, pass mark, open/closed book, ID, break policy). Then do one full timed practice paper under exam conditions: handwriting, no notes, no phone.
Target your weakest areas only. Be able to reproduce from memory the structure of ISO/IEC 27001 clauses 4–10 and the Annex A control themes, and be able to explain audit principles, evidence, sampling, findings, nonconformity grading and corrective action in your own words.
Light revision of your summary sheet only - no new topics. Pack ID, confirmation, pens, watch and water. Confirm the venue route or re-run the online system check. Eat properly and go to bed at a normal time.
Eat a proper breakfast, re-read your summary sheet once in the corridor, then put it away. Arrive 30–45 minutes early (or log in early for remote proctoring). Have ID out. Avoid intense debate with other candidates about technical points, which only raises anxiety.
Read the instructions and the whole paper before writing. Note the marks per question and allocate minutes roughly pro rata, keeping a reserve at the end. Start with the question you can answer most confidently.
Answer in short structured points: requirement, evidence seen, evaluation against the criterion, conclusion. Use audit vocabulary precisely (audit criteria, objective evidence, finding, nonconformity, observation, correction, corrective action). If time runs short on a question, write brief bullet points rather than nothing - partial marks are usually available.
Check that every question has an answer, that question numbers and your candidate details are correct, and that your handwriting is legible. Stop adding new content; fix and finish instead.
Note which topics you found hard while it is fresh, for your next development step (or a retake, if needed). Ask the provider about the results timeline and appeal/feedback process rather than relying on what other candidates say.
Rules to check
Bring photo ID whose name matches your registration. If your name differs (marriage, transliteration, shortened form), tell the provider before exam day - invigilators generally cannot admit you without it.
Assume the exam is closed book: no standards, notes, textbooks, or annotated materials in the room, and phones and smartwatches switched off and stored away. Confirm the provider's exact permitted-items list, since rules differ between centres and online proctoring.
No communication with other candidates once the exam has started. Talking, passing items, or looking at another candidate's paper is normally treated as malpractice - confirm the provider's malpractice policy so you know the consequences.
If you need to leave the room for a comfort break, raise your hand and wait to be accompanied. In most centres the clock does not stop, so budget for this - confirm with the provider how breaks are handled.
Answer in the language in which the exam was set unless the provider has approved an alternative. If English is not your first language and you want extra time or a permitted dictionary, arrange it in advance in writing.
Attempt every question. An unanswered question normally scores zero regardless of how well you know the topic, so prioritise coverage over perfection on any single answer.
Write in your own words. Reproducing long passages from a standard or from training materials adds little credit, and copying another candidate's work is a conduct issue.
If you feel unwell during the exam, tell the invigilator immediately rather than struggling through. Ask the provider in advance what evidence it requires for extenuating circumstances or a retake.