ISSAP exam-day guide
ISSAP · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the exact name-matching ID the test provider requires. Confirm with the provider which ID types are accepted and whether a secondary ID is needed; do not assume a work badge or expired document will pass.
Appointment confirmation and testing details
Have your confirmation email, appointment time, and test-center address or online proctoring link ready. Confirm the delivery format (test center vs. remote proctoring) with the provider ahead of time.
Know the exam logistics: length, format, and question types
Verify the current number of questions, time limit, and whether the exam is linear or adaptive with the provider. ISSAP is a CISSP concentration exam, so expect scenario-based multiple-choice items rather than recall trivia. Confirm all specifics, since policies change.
Confirm scoring and pass mark with the provider
Do not rely on memorized pass-point numbers. Check the current scoring scale and passing standard on the official provider page before exam day.
Review the official exam outline / domains
Bring a one-page summary of the domain weighting from the official outline so your final review targets the heaviest areas. Do not invent weights; use the published outline.
Lightweight notes on architecture frameworks you use
A single sheet of your own key concepts (e.g., SABSA, TOGAF ADM phases, Zachman, security architecture review steps) is useful for the final hour. Keep it concise and original.
Transportation and arrival buffer
Plan to arrive well before your appointment; confirm the provider's late-arrival and check-in window. For remote proctoring, test your camera, microphone, and connection in advance.
Remote-proctoring room requirements (if applicable)
Clear your desk, remove notes and devices, and confirm the provider's rules on room scans and permitted items. Confirm with the provider what is allowed; policies vary.
Hydration and a light snack strategy
Confirm whether breaks are permitted and how they affect your clock. Eat lightly before the exam to avoid mid-test fatigue.
Rest and sleep plan for the night before
Avoid cramming new material the night before. A rested candidate performs better on scenario reasoning than an exhausted one.
Backup plan for technical failure
For remote testing, know the provider's support number and reschedule/case policy. Save it offline in case your connection drops.
Confirm reschedule/cancellation policy
Check the provider's deadline and fees for rescheduling. needs_review: exact windows and fees change, so verify on the official site.
Plan the day
Do a final gap review against the official domain outline. Spend time on weak domains but stop learning brand-new topics. Re-read your own one-page summaries of security architecture frameworks, risk analysis, and requirements gathering. Take one short timed practice set to calibrate pacing, then stop.
Confirm all logistics: appointment time, location or proctoring link, ID requirements, and permitted items. Print or save confirmations offline. Prepare your ID and any allowed materials in one place. Do a light review of the heaviest-weighted domains only.
Stop heavy studying. Review only your condensed notes for 60-90 minutes. Confirm the provider's check-in process and late-arrival rules. Set two alarms, plan your route or test your remote setup, and get a full night's sleep. Avoid alcohol and heavy meals.
Eat a normal breakfast and hydrate moderately. Re-read your one-page summary for 20-30 minutes, no more. Arrive early or log in early per the provider's instructions. Bring your ID and confirmation. Keep your phone off and stowed per the rules.
Read each scenario fully and identify the decision-maker and the constraint before choosing. Eliminate obviously wrong options, then choose the answer that best fits governance, risk, and architecture principles rather than a purely technical fix. Flag uncertain items and return if time allows. Watch the clock and keep a steady pace. Use any permitted breaks as instructed by the proctor.
Note which domains felt weak while memory is fresh, in case you need to retake. Keep your score report. If you did not pass, confirm the provider's retake waiting period and fees before scheduling.
Rules to check
Present valid, unexpired government-issued photo ID matching your registration name exactly. Confirm accepted ID types with the provider before exam day.
Follow all proctor instructions for both test-center and remote sessions, including room scans, desk clearance, and permitted items. Confirm with the provider what is allowed; do not assume notes, phones, or smartwatches are permitted.
Do not communicate with anyone about exam content during the test, and do not reproduce or share exam questions afterward. This violates the provider's code of conduct and can invalidate your result.
Confirm the break policy with the provider in advance, including whether breaks pause your clock or count against your time, and how to signal the proctor.
Understand the scoring model before you sit: verify the current question count, time limit, and passing standard with the provider. Do not rely on third-party pass-mark claims.
If a technical failure occurs during a remote session, stop and contact the provider's support immediately rather than continuing; confirm the provider's incident and reschedule policy beforehand.
Arrive or log in within the provider's check-in window. Confirm the late-arrival rule with the provider, as missing it may forfeit your appointment and fee.
Keep personal items, including phones and wearables, stowed per the rules. If you need accommodation, request it from the provider well before exam day.