CCISO exam-day guide
CCISO · Prepare for the day ahead.
Your checklist
Confirm exam format, delivery method, and scheduling with the provider
CCISO is offered by EC-Council. Before exam day, verify from your own registration record and the provider's current candidate handbook whether your sitting is at a test center or proctored online, the appointment time and time zone, and the exact duration and question count. Do not rely on secondhand forum posts, because delivery details can change. needs_review
Bring two valid forms of government-issued photo ID
At least one should be a primary ID with a signature, such as a passport or driver's license. The name on your registration must match your ID exactly, including middle names and suffixes. If your ID name differs from your registration, contact the provider before exam day to correct it. needs_review: confirm the exact ID requirements and accepted document types with the provider.
Know your login credentials and appointment confirmation
For online proctoring, have your registration email, candidate ID, and any exam access code ready. For a test center, bring your appointment confirmation number. Store these where you can reach them without searching through email at the last minute.
Test your computer, camera, microphone, and internet if proctored online
Run the provider's system check on the same machine and network you will use on exam day, ideally 48 to 72 hours ahead and again the day before. Wired internet is more stable than Wi-Fi. Close background applications and disable notifications. needs_review: confirm the minimum system requirements and whether a system check tool is provided.
Prepare a compliant testing space if proctored online
Use a private room with a door you can close, a clear desk, good lighting, and no other people or screens visible. Remove notes, phones, smart watches, and second monitors from the desk. Plan for a room scan and for the proctor to ask you to show your surroundings. needs_review: confirm the provider's specific room and desk rules.
Review the provider's exam-day rules and candidate agreement
Read the current candidate handbook sections on permitted items, breaks, restroom policy, and prohibited behavior. Rules on scratch paper, calculators, and breaks vary by delivery method. Confirm rather than assume, because a violation can void your score.
Rehearse the domain structure and your timing plan
CCISO covers governance, risk management, controls and audit, security program management and operations, and strategic planning and finance, among other domains. Confirm the current domain weighting from the provider. Decide in advance how many minutes you will spend per question and how much buffer you will keep for review.
Plan your route and arrival buffer for a test center
Arrive earlier than the provider's stated check-in time, typically 15 to 30 minutes early, to allow for ID checks and locker use. Confirm parking, transit, and building access the day before. needs_review: confirm the provider's stated arrival window and late-arrival policy.
Prepare for a long sitting: hydration, food, and medication
Eat a normal meal beforehand and manage caffeine so you are not distracted mid-exam. If you take scheduled medication, plan around the provider's break and permitted-item rules. needs_review: confirm whether breaks are allowed and whether food, water, or medication may be kept at the desk.
Leave prohibited items at home or in a locker
Phones, smart watches, notes, study guides, and most personal items are typically not allowed in the testing room. Test centers usually provide a locker. For online proctoring, keep your phone out of the room unless the proctor instructs otherwise. needs_review: confirm the permitted-item list with the provider.
Set two alarms and confirm your time zone
Convert your appointment time to your local time zone and set alarms for the day before and the morning of. A time-zone mistake is a common and avoidable cause of missed appointments.
Know the reschedule and cancellation policy before you need it
Record the provider's deadline for rescheduling and the fees involved, in case of illness or an emergency. needs_review: confirm the current reschedule window and fees with the provider.
Plan the day
Re-read the provider's candidate handbook and exam-day rules, and confirm your appointment time, time zone, delivery method, and ID requirements. Run the system check if you are testing online. Stop learning new material and shift to consolidating: review your own summary notes on the CCISO domains, especially governance, risk management, and the controls and audit domain, plus any weak areas flagged by practice questions. Get normal sleep rather than cramming.
Do one timed practice set under exam-like conditions to calibrate pacing, then review only the explanations for questions you missed. Write a one-page timing plan: minutes per question, checkpoint times, and a review buffer. Prepare your ID, appointment confirmation, and any permitted items in one place. Confirm your travel or room setup.
Do a light review of frameworks and key definitions, not new topics. Re-run the system check and confirm your network and room if testing online. Charge devices and prepare your ID and confirmation. Eat well, avoid alcohol, and aim for a full night's sleep. Set alarms and confirm the time zone one last time.
Eat a normal meal and limit caffeine to your usual amount. Re-check your ID and confirmation. For a test center, leave with a buffer for traffic and check-in. For online proctoring, log in early, close other applications, silence your phone, clear your desk, and complete the room scan as instructed. Take a few slow breaths and read the first question carefully rather than rushing.
Read each question fully and watch for qualifiers such as best, most, first, and except. Answer every question, since there is typically no penalty for guessing, and flag uncertain items for review rather than stalling. Track your checkpoint times against your pacing plan. Scenario questions reward the answer a senior security executive would choose: aligned to business objectives, risk-based, and defensible, rather than the most technical option. If you take a break, follow the proctor's instructions exactly. Before submitting, confirm you have answered all questions and revisit flagged items only if time allows.
Follow the provider's instructions on when and how results are delivered. Save your score report and any candidate ID for your records. If you did not pass, note which domains were weakest while it is fresh, and confirm the retake policy and waiting period with the provider before scheduling again.
Rules to check
Follow the provider's candidate agreement exactly. Prohibited conduct, including unauthorized materials, communication with others, or capturing exam content, can result in score invalidation and further sanctions. Confirm the current agreement terms with the provider.
Present valid, unexpired government-issued photo ID matching your registration name. If your name does not match, resolve it with the provider before exam day, because mismatches can prevent you from sitting.
Do not bring notes, phones, smart watches, or other unauthorized devices into the testing room. For online proctoring, keep your workspace clear and follow the proctor's instructions on showing your room and desk.
Breaks and restroom access are governed by the provider's rules and may differ between test-center and online delivery. Ask the proctor before leaving your seat, and confirm the policy in advance rather than assuming breaks are allowed.
Scoring and pass standards are set by the provider. Do not assume a particular pass mark or that unanswered questions are penalized; confirm the current scoring policy, and in general answer every question because there is usually no penalty for guessing.
If a technical problem occurs during the exam, stop and notify the proctor immediately rather than troubleshooting alone. Ask what documentation is needed, and follow up in writing with the provider afterward.
Report any suspected irregularity or security incident to the proctor and the provider. Do not discuss specific exam content with others after the sitting, as doing so may violate the candidate agreement.
Confirm rescheduling, cancellation, and retake rules, including deadlines and fees, with the provider. Do not rely on assumptions about waiting periods or refunds.