ISO 27001 LI exam-day guide
ISO 27001 LI · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the exact ID name matching your registration. For online proctored delivery, check the provider's ID requirements in advance, as some accept only a passport or national ID.
Exam admission / confirmation email
Have your booking confirmation, candidate number, and provider contact details accessible (printed or on a second device) in case of technical issues.
Confirmed exam format and logistics
Number of questions, time limit, language options, open/closed-book status, and pass mark vary by scheme and version. Confirm all of these with the provider before exam day rather than relying on hearsay.
Confirmed delivery requirements (online proctoring)
If remote-proctored: confirm system check, webcam, microphone, browser lock, and permitted desk items with the provider. Run the technical check at least 24h ahead.
Permitted reference materials confirmed
Most ISO 27001 Lead Implementer exams are closed-book, but confirm the provider's rule. If a standard or notes are permitted, bring only the allowed format (no annotations unless explicitly allowed).
Scratch paper and pen allowance confirmed
Some providers allow blank paper or an on-screen whiteboard; others prohibit all writing materials. Confirm before the exam.
Quiet, distraction-free location and backup plan
For online exams: private room, stable connection, charged device, phone hotspot as backup, and a second device with the provider's support number.
Time-zone and start-time double-check
Convert the scheduled start time to your local time zone and plan to be ready 30 minutes early for check-in.
Review plan for high-weight domains
Prioritise the implementation lifecycle: context and scope, leadership and policy, risk assessment and treatment, Annex A control selection and Statement of Applicability, competence and awareness, documentation, monitoring/measurement, internal audit, management review, and continual improvement.
Rest and logistics plan
Plan sleep, meals, and travel so you arrive calm. Avoid last-minute cramming of new material in the final hour.
Plan the day
Confirm all logistics with the provider (format, time limit, open/closed-book, permitted items, delivery platform). Re-read your weakest domain notes and the implementation lifecycle sequence rather than re-reading the whole standard.
Do one timed practice run under exam conditions to calibrate your pace (roughly 1.5–2 minutes per question, depending on the confirmed question count). Review only the errors, not the whole set.
Run the online-proctoring system check if applicable; charge devices; prepare ID, confirmation email, and permitted materials in one place. Stop studying by early evening and get a full night's sleep.
Skim a one-page summary you wrote yourself: PDCA/implementation phases, key document names, Annex A control themes, SoA and risk treatment plan purpose, and the difference between an ISMS audit and a certification audit.
Eat, hydrate, avoid new material. Re-read only your summary sheet. Log in or arrive at least 30 minutes before the scheduled start for identity verification and check-in.
Read the whole question stem before the options; watch for qualifiers like 'first', 'most appropriate', 'primary', and 'not'. Answer every question - there is normally no penalty for guessing, but confirm with the provider.
Use a two-pass approach: answer confident items first, flag uncertain ones, then return. Budget time to leave 5–10 minutes for review and to confirm all items are answered.
For scenario questions, anchor on the clause/phase being described (e.g. Clause 6 planning vs Clause 9 performance evaluation) and choose the option that matches the standard's required sequence and the role responsible.
Note the result-provisional process with the provider (immediate vs later notification, retake rules, certificate issuance) and record any questions you found ambiguous for your own learning.
Rules to check
Follow the provider's identification and check-in rules exactly; mismatched names or missing ID can result in refusal to sit the exam with no refund - confirm the acceptable ID types with the provider.
Closed-book is the common default for ISO management system Lead exams; do not bring notes, phones, smart watches, or reference standards unless the provider explicitly permits them. Confirm before exam day.
Breaks are typically not allowed during a timed exam, or if allowed, the clock keeps running. Confirm the provider's break rule and plan hydration accordingly.
Do not communicate with anyone during the exam, do not screenshot or copy questions, and do not discuss specific exam content afterwards - most providers treat this as a code-of-conduct violation.
Answer every question. Where negative marking is not applied, an unanswered item is a guaranteed loss; confirm the provider's scoring rule first.
If a technical failure occurs during an online exam, stop and contact the provider's support immediately and document the incident (time, screenshots) - do not attempt to restart or continue without guidance.
Understand the scoring model before you start: confirm the pass mark, whether it is a scaled score, and the retake policy with the provider rather than assuming.
Arrive or log in early; late entry may be refused or may reduce your available time, and the provider's late-arrival policy governs regardless of the reason.