CISO exam-day guide
CISO · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the original, unexpired ID in the exact name used on your registration. Confirm with the provider which ID types it accepts and whether a secondary ID is required for online proctoring.
Appointment confirmation and test-taker ID number
Have the confirmation email or portal screenshot available offline on your phone. You may need the registration or eligibility number to check in.
Provider-specific testing rules
Re-read the current candidate handbook or proctoring rules 72 hours out. Policies on permitted items, room requirements, and breaks vary by provider and delivery mode; confirm with the provider rather than relying on secondhand advice.
Testing-environment check (online delivery)
If testing remotely, complete any required system test, verify camera, microphone, and bandwidth, and confirm the room and desk meet the provider's rules. Do this at least 24 hours ahead so you can fix problems.
Workstation and browser readiness (test center or online)
For online delivery, close all other applications, disable notifications, and confirm the proctor's required browser version. For a test center, confirm the address, parking, and arrival time.
Acceptable calculator or reference materials
Confirm with the provider whether an on-screen calculator, scratch paper, or any reference sheet is permitted. Do not bring your own unless the rules explicitly allow it.
Scratch materials as permitted
If the provider allows erasable note boards or paper, confirm the exact type and whether you must show both sides to the proctor before and after the exam.
Water and a light snack for before/after
Keep these outside the testing room unless the provider permits them inside. Hydration and a small snack help during a long exam day.
Plan for breaks and timing
Know in advance whether breaks are scheduled, optional, or unavailable, and whether the clock stops. Confirm the provider's break policy before test day.
Transportation and arrival buffer
Plan to arrive early enough to complete ID checks and seating. For a test center, add buffer for traffic, parking, and security screening.
Backup power and connectivity (online delivery)
Charge devices, have a backup internet option such as a mobile hotspot, and know the proctor's technical-support number in case of disconnection.
Review plan for the final week
Focus on governance, risk, and security-program domains where you are weakest, and practice scenario questions under timed conditions rather than rereading notes.
Plan the day
Confirm appointment details, delivery mode, and rules with the provider. Finish any system or environment checks. Do one timed practice set and review only the explanations for missed questions. Stop learning new topics after this point.
Review your one-page summary of frameworks, risk terminology, and governance concepts. Practice explaining out loud how you would prioritize a security investment or respond to an incident, since CISO-style exams test judgment, not recall.
Light review only. Prepare ID, confirmation, and permitted materials. Confirm the test center address or online check-in steps. Set two alarms, avoid heavy meals and alcohol, and aim for a full night's sleep.
Eat a normal breakfast, arrive or log in early, and complete ID and environment checks without rushing. Skim your summary sheet once, then put it away. Use the restroom before the exam starts.
Read each question fully, identify what is being asked, and answer the straightforward items first. Flag long scenario questions for a second pass. Watch the clock and keep a steady pace.
For judgment questions, eliminate options that are technically correct but ignore business context, risk acceptance, or governance. Prefer answers that align with the organization's risk appetite and escalate appropriately.
Take scheduled breaks if offered, even briefly. Stand, hydrate, and reset. Note whether the clock runs during breaks and budget accordingly.
Use remaining time to revisit flagged questions, check for misread qualifiers such as 'FIRST' or 'BEST', and ensure no question is left blank unless the provider penalizes guessing.
Note your provisional result if shown, keep your score report, and record which domains felt weakest in case you need to retake. Confirm the provider's score-report and retake timeline.
Rules to check
Bring the exact ID required by the provider and ensure the name matches your registration. If it does not, contact the provider before test day.
Follow all proctor instructions. Unauthorized materials, notes, or devices in the testing area can lead to score cancellation; confirm permitted items with the provider in advance.
Do not communicate with anyone other than the proctor during the exam, and do not discuss or reproduce exam content afterward. Sharing remembered questions violates most candidate agreements.
Breaks are governed by the provider's policy. Confirm whether unscheduled breaks are allowed, whether the clock stops, and what re-entry checks apply.
Scoring and pass standards are set by the provider. Do not assume a particular scaled score or penalty for guessing; confirm scoring rules and whether unanswered questions count against you.
If technical problems occur during online delivery, pause and contact the proctor or support immediately, and note the time and issue. Do not attempt to troubleshoot in ways the rules prohibit.
Arrive or check in early. Late arrival may forfeit your seat or appointment depending on provider policy; confirm the cutoff with the provider.
Report any accommodation needs to the provider well before test day. Accommodations are not granted retroactively at check-in.