PECB DORA Foundation exam-day guide
PECB DORA Foundation · Prepare for the day ahead.
Your checklist
Confirm exam delivery format and rules with the provider
Before exam day, verify with the provider whether your sitting is online-proctored or at a test center, and read their candidate handbook for allowed materials, ID requirements, and break policy. Do not assume a specific rule; confirm with the provider.
Valid government-issued photo ID matching your registration name
Bring the exact ID type the provider requires and ensure the name matches your registration. If you have any doubt about which ID is accepted, confirm with the provider in advance.
Know your exam appointment details and login credentials
Have your confirmation email, appointment time (with time zone), and any portal credentials accessible. For online proctoring, test your login before the day if the provider allows.
Stable internet connection and working webcam/microphone (online sittings)
If sitting online, use a wired or stable connection and test camera and mic in advance. Run any system compatibility check the provider offers; if none is described, confirm requirements with the provider.
Quiet, private, well-lit room free of prohibited items
For online proctoring, clear your desk of notes, phones, and second screens unless the provider explicitly permits them. Confirm the provider's room and desk rules beforehand.
Review the DORA regulation structure, not just sample questions
Be able to place the five pillars (ICT risk management, incident reporting, resilience testing, ICT third-party risk, information sharing) and recall key definitions and timelines. Foundation exams reward accurate recall of scope and terminology.
Re-read your own summary of ICT risk management and incident reporting
These are heavily weighted topics. Focus on the risk-management framework, incident classification and reporting timelines, and the roles of management bodies. Verify exact figures against the regulation text.
Prepare a one-page formula-free 'cheat sheet' for your own study only
Use it during final review, not during the exam unless the provider permits reference materials. Confirm with the provider what, if anything, you may bring into the test.
Plan arrival or login time with a buffer
Arrive or log in early enough to complete ID checks and setup. The exact check-in window is provider-specific; confirm with the provider.
Water and a quiet environment, subject to provider rules
Hydration helps concentration, but confirm whether drinks are allowed at your desk for online or in-person sittings.
Backup contact for technical issues
Know the provider's support channel in case of a connection or platform failure. Save the support contact before the exam.
Plan the day
Finish a structured review of all five DORA pillars. Re-read the regulation's definitions and scope, then test yourself on incident reporting timelines, resilience testing requirements, and third-party risk provisions. Identify weak areas and close them with targeted reading rather than new practice questions.
Confirm logistics: appointment time and time zone, delivery format, ID type, and technical requirements. If online, run the provider's system test and check your camera, microphone, and connection. Resolve any uncertainty with the provider now, not on exam day.
Do a light review only: your own summary notes and key definitions. Avoid cramming new material. Prepare your ID, confirmation details, and workspace. Get a full night's sleep.
Re-check the provider's candidate instructions for allowed materials, breaks, and check-in procedure. Confirm with the provider if anything is unclear.
Eat a normal meal, review your one-page summary briefly, and set up your workspace early. For online sittings, close unnecessary applications and silence notifications. Log in ahead of your appointment to complete ID verification.
Read each question fully and watch for qualifiers such as 'primary', 'most appropriate', or 'not'. Answer the straightforward items first, flag uncertain ones, and return to them if the platform allows. Manage your pace against the number of questions and time available; confirm the format with the provider.
If a technical problem occurs, stay calm and contact the provider's support channel immediately. Do not attempt to fix platform issues in ways that could violate proctoring rules.
Note which topics felt weak while they are fresh. If you must retake, focus your next study cycle there. Confirm result timing and any retake policy with the provider.
Rules to check
Follow the provider's identification policy exactly. Present the required government-issued photo ID with a name matching your registration; if the accepted ID types are unclear, confirm with the provider before exam day.
Do not bring or use unauthorized materials. Notes, phones, smart watches, and second screens are generally prohibited unless the provider explicitly allows them; confirm the permitted-items list with the provider.
For online proctored sittings, keep your face visible and your room private for the entire session. Avoid leaving the camera view or talking to others; confirm the provider's specific proctoring rules in advance.
Breaks are provider-specific. Do not assume a break is allowed or that the clock stops; confirm the break policy with the provider before you begin.
Scoring rules, including the passing score and whether wrong answers are penalized, are set by the provider. Do not guess; confirm the scoring and pass mark with the provider.
Attempt only your own exam. Do not share, record, or reproduce exam questions afterward; this violates typical candidate agreements and undermines exam integrity.
If you experience a technical failure, report it to the provider's support channel immediately and follow their instructions rather than improvising.
Read every question carefully, including qualifiers. If a question seems ambiguous, choose the answer most consistent with the DORA regulation text rather than personal workplace practice.