ISO 27701 LI exam-day guide
ISO 27701 LI · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the original, unexpired ID in the name used for your registration. Confirm with the provider which ID types are accepted and whether a secondary ID is required, especially for online proctoring.
Exam confirmation and appointment details
Have your registration confirmation, appointment time, and provider or test-centre contact information accessible. For online delivery, confirm the login link and system check time with the provider.
Accepted calculator or none at all
Confirm with the provider whether any calculator is permitted. Do not assume a personal calculator is allowed; if in doubt, plan to attempt all calculations manually or use an on-screen tool if provided.
Notes and study materials left outside the testing area
Closed-book rules normally apply. Confirm with the provider what, if anything, may remain at your desk. Keep personal notes, textbooks, and smart devices out of the testing room.
Quiet, well-lit room and stable internet (online proctoring)
For remote exams, use a private room with a clear desk, reliable power, and a wired or strong Wi-Fi connection. Run the provider's system test in advance and confirm the permitted browser and webcam/microphone requirements.
Knowledge of ISO/IEC 27701 structure and its relationship to ISO/IEC 27001 and 27002
Be able to explain how 27701 extends the ISMS to privacy information management, including the PIMS-specific requirements and the privacy extension guidance. Review clause and annex structure without relying on memorised numbers you have not verified.
Working understanding of controller and processor roles and their specific control sets
Expect questions that require you to apply requirements to a given role. Be ready to distinguish obligations that apply to PII controllers from those that apply to PII processors, and to identify where guidance is informative rather than certifiable.
Familiarity with key privacy concepts and risk terminology
Review terms such as PII, PII principal, processing, privacy risk, and the relationship between privacy risk and information security risk. Be able to apply them to scenarios rather than only reciting definitions.
Practice with scenario and audit-style questions
Work through original practice questions that ask what a privacy information management system should do in a given situation. Focus on justifying the best answer from the standard's requirements and guidance.
Time-management plan for the question count
Confirm the number of questions and total time with the provider, then set a rough per-question pace. Plan to flag uncertain items and return to them rather than losing time on a single question.
Review of scoring and result-reporting rules
Confirm with the provider the passing score, whether wrong answers are penalised, and when and how results are released. Do not rely on second-hand claims about the pass mark.
Backup plan for technical failure
Know the provider's support contact and procedure if the exam disconnects or the proctor session fails. Confirm in advance whether lost time is restored and how incidents are documented; mark this needs_review until verified with the provider.
Plan the day
Switch from broad reading to targeted review. Revisit the structure of ISO/IEC 27701, the controller and processor control sets, and the privacy risk concepts. Do one timed practice set under exam-like conditions and review every wrong answer to identify the underlying misunderstanding, not just the correct option.
Confirm logistics with the provider: appointment time, time zone, test-centre address or online login process, accepted ID, permitted materials, and the provider's cancellation or rescheduling rules. Mark any detail you cannot verify as needs_review rather than assuming.
Run the provider's system check if the exam is online. Test your webcam, microphone, browser, and internet connection, and identify a backup connection such as a mobile hotspot. Clear your desk and testing area of notes, devices, and anything the proctor may question.
Do a light review only: key definitions, the distinction between requirements and guidance, and the roles of controller and processor. Avoid cramming new material. Prepare your ID, confirmation details, and any permitted items in one place.
Confirm the start time in your local time zone and set two alarms. Plan travel to a test centre with a buffer for delays, or plan to be logged in early for online proctoring. Get a full night's sleep; fatigue affects scenario-based judgement more than memorised facts.
Eat a normal meal and avoid heavy caffeine if you are sensitive to it. Do a final 20-30 minute review of your own summary notes, then stop. Recheck your ID and appointment details, and arrive or log in early as instructed by the provider.
Read each question fully and identify whether it asks for the best answer, the first action, or the exception. Answer the questions you know, flag uncertain ones, and keep to your planned pace. Watch for qualifiers such as 'most appropriate' or 'primary' that change the intended answer.
Return to flagged questions and eliminate clearly wrong options first. For scenario questions, ask which answer is supported by the standard's requirements or guidance rather than by general good practice alone. Change an answer only when you can identify a concrete reason.
Confirm you have answered every question if the platform allows review, and check that no question was left blank unintentionally. Submit according to the provider's instructions and note any technical incident for the provider's support process.
Rules to check
Bring the original, unexpired government-issued photo ID in the exact name used for registration. Confirm with the provider which ID types are accepted and whether a second form of ID is required; do not assume a digital copy will be accepted.
The exam is normally closed-book. Do not bring notes, textbooks, smart watches, phones, or other unauthorised devices into the testing area. Confirm with the provider exactly what may remain at your desk, and ask the proctor before the exam starts if anything is unclear.
Follow all proctor and test-centre instructions, including room scans, desk clearance, and rules on leaving the testing area. For online exams, keep your face and hands visible as instructed and avoid reading questions aloud if the provider prohibits it.
Confirm break rules with the provider before exam day. Some deliveries allow scheduled breaks while others do not stop the clock; do not leave the testing area without permission, as this may be treated as a conduct issue.
Do not communicate with other candidates during the exam, share exam content afterwards, or attempt to reproduce questions. Treat all exam material as confidential and follow the provider's non-disclosure terms.
Confirm the scoring and pass rules with the provider, including whether unanswered questions are penalised and whether partial credit applies. Do not rely on unverified claims about the pass mark or question weighting.
If a technical failure occurs, stay calm, follow the provider's support procedure, and document what happened. Do not attempt to restart or troubleshoot in ways the provider has not authorised; confirm the incident-handling process in advance.
Report any irregularity, such as a suspected security issue or an instruction you believe is improper, to the provider through its official channel rather than raising it with the proctor alone if the provider specifies otherwise.