ISSMP exam-day guide
ISSMP · Prepare for the day ahead.
Your checklist
Government-issued photo ID with signature
Bring the primary ID you used when registering (driver's license or passport are typical). The name must match your registration exactly. Some providers require a second form of ID, so verify the exact ID policy for your appointment in your confirmation materials or with the provider before test day.
Appointment confirmation and eligibility details
Have your appointment confirmation number, test center address, and reporting time accessible - printed or on paper, since phones are usually not permitted in the testing room.
ISC2 account / member ID information
Know your ISC2 login and member or candidate ID in case the test center or proctor asks you to verify your record. Confirm the exact requirement with the provider.
Verified test center route and travel buffer
Do a dry run of the route, confirm parking or transit options, and plan to arrive well ahead of your appointment. Confirm the provider's recommended arrival window (commonly around 30 minutes early) rather than assuming it.
Online proctoring system check completed (if testing remotely)
If you test online, run the provider's system test - camera, microphone, bandwidth, and browser - at least 24 hours ahead, and confirm the room and desk requirements for remote delivery.
Review of the current exam blueprint, format, and time limit
Confirm the current item count, time limit, and passing standard on the official ISC2 exam outline page for the ISSMP concentration. Do not rely on secondhand summaries or older forum posts.
Known scoring model understood
Concentration exams are reported on a scaled score with a passing point well above the midpoint; every question counts, and there is no partial credit. Confirm the exact passing score for your exam with the provider before test day.
NDA and testing rules read in advance
Read the candidate agreement and testing rules so you are not surprised by the acknowledgment screen or by prohibited-item rules at check-in.
Break strategy decided
Know in advance whether breaks are available and whether break time counts against your exam clock. Confirm the break policy for your delivery method with the provider.
Layers and comfort items for a cold room
Test rooms are often heavily air-conditioned. Wear layers you can remove; note that bulky outerwear may need to be stowed, so check the provider's rules.
Light snack and water for before/after the exam
Keep food and drink outside the testing room unless the provider says otherwise; plan to consume them before check-in or during an approved break.
Calendar and work coverage cleared
Block the full appointment plus travel and check-in time, and make sure no one expects you to be reachable during the exam window.
Plan the day
Stop adding new material. Re-read your own summary notes on the eight ISSMP domains at the management level - governance, risk, security program development, incident management, contingency planning, compliance, and professional ethics. Do two or three timed practice sets to rehearse pacing, then stop and review only what you got wrong.
Confirm logistics: re-verify the appointment date, time, and location (or remote-delivery requirements), re-run any system check, and print or write down your confirmation details. Resolve any ID-name mismatch now, not on test day.
Protect sleep. Shift your wake time toward the time you will need on exam day, and avoid late-night cramming that trades memory consolidation for anxiety.
Light review only: skim your one-page list of frameworks, governance concepts, and decision-making heuristics (think like the accountable manager, choose the broadest correct control, prefer risk-based answers). Do not start a new topic.
Lay out ID, confirmation details, layers, and snack. Check the weather and traffic outlook and set two alarms. Confirm your travel plan and a backup option.
Stop studying by early evening. Eat a normal meal, avoid alcohol, and go to bed at a reasonable hour. If you cannot sleep, rest quietly rather than studying - recall degrades more from exhaustion than from one missed review.
Eat a normal breakfast, hydrate moderately, and avoid heavy caffeine if you are already anxious. Re-read only your short summary sheet - nothing new.
Leave with buffer time built in. Arrive ahead of your appointment window; if testing remotely, clear your desk, close other applications, and start the check-in process early.
Use the first minutes to settle: read the tutorial screens, breathe, and start. Read each question to the end, identify what role the question puts you in (CISO, program manager, risk owner), and answer from that perspective.
Pace in blocks. Divide your available time by the number of items to get an average per-question budget, and check your elapsed time at roughly the one-quarter and one-half marks. Flag genuinely ambiguous items only if the interface allows review, and do not let one hard question consume three minutes.
Answer every question - there is no penalty for a wrong answer beyond the score itself, and an unanswered item is a guaranteed miss. If two options look correct, prefer the one that addresses governance, risk treatment, or the broader organizational obligation over a narrow technical fix.
If you take a break, return promptly and re-orient for a few seconds before resuming. In the last ten minutes, stop second-guessing completed answers and use remaining time to finish any unreached items.
Rules to check
Bring the exact government-issued photo ID required by the provider, with a name matching your registration. Acceptable ID types and any second-ID requirement vary - confirm them with the provider before test day, and do not assume an expired or photocopied document will be accepted.
Expect an acknowledgment of the candidate agreement and a no-disclosure obligation at the start. Discussing, reproducing, or distributing exam content afterward violates the agreement and can void your result or affect your certification status.
Personal items - phones, smart watches, notes, books, bags - are generally not permitted in the testing room and must be stored as directed. Do not bring study notes into the room, and do not attempt to use any device during the exam.
Breaks, if offered, may be counted against your exam clock depending on delivery method. Confirm the break policy for your appointment with the provider and plan your hydration accordingly rather than discovering it mid-exam.
The exam is scored against a scaled passing standard set by the certifying body, not a simple percentage, and there is no partial credit per item. Confirm the current passing score, item count, and time limit on the official ISC2 exam outline for ISSMP.
Scratch materials, if any, are supplied by the test administrator and must be returned; you may not bring your own paper, whiteboard, or writing implements. Follow the administrator's instructions exactly.
Arrive within the provider's reporting window. Candidates who arrive after the allowed cutoff may be refused entry and treated as a missed appointment - confirm the late-arrival and reschedule policies with the provider before you travel.
If something goes wrong - equipment failure, a disruptive test environment, or an interruption - stop and notify the administrator or proctor immediately and get it documented before you leave. Raise issues at the time rather than after the fact.