PECB ISO 18788 Foundation exam-day guide
PECB ISO 18788 Foundation · Prepare for the day ahead.
Your checklist
Valid government-issued photo ID
Bring the same ID document you used at registration, with a signature and a recognizable photo. If you are testing remotely, the proctor will ask you to hold it up to the camera; if in person, it is checked at the desk. Confirm with the provider which ID types it accepts and whether a second form is required.
Exam appointment confirmation and candidate number
Have the confirmation email or candidate/admission number accessible (printed or on your phone) so staff can locate your booking quickly. Check the exact start time in your local time zone, since confirmations sometimes display a different zone.
Know the delivery format and platform
Confirm with the provider whether your sitting is paper-based or computer-based, on-site or remotely proctored, and which browser or lockdown software is used. Install and test any required software before exam day rather than on the morning of the test.
Closed-book assumption unless told otherwise
Treat the exam as closed-book. Confirm with the provider whether any reference material, such as the ISO 18788 standard text, is permitted; do not bring notes or the standard into the room unless the provider explicitly allows it.
Review the exam structure and scoring rules
Know the number of questions, the time limit, the pass mark or percentage, and whether wrong answers are penalized. These details are set by the certification body; confirm current values with the provider, as they can change between exam versions.
Revise the ISO 18788 core concepts, not trivia
Focus on the Plan-Do-Check-Act structure of the standard, the security operations management system (SOMS) scope, leadership and policy, risk assessment and treatment, operational control, performance evaluation, and improvement. Be able to distinguish requirements from guidance.
Practice with the question style
Foundation exams typically use multiple-choice or multiple-response items that test recognition and basic comprehension. Practise reading each stem for qualifiers such as 'primary', 'first', or 'not', and decide how many options you must select before answering.
Remote-sitting environment check (if applicable)
If testing remotely, confirm your room, desk, lighting, camera, microphone, and internet stability meet the provider's rules, and clear the workspace of notes and devices. Confirm with the provider the exact room and desk requirements; these are strict and vary by provider.
Plan arrival and buffer time
Arrive or log in early enough to complete ID checks and system checks without stress. Confirm with the provider how early you should arrive or connect, and what happens if you are late.
Water and a quiet, comfortable setup
Bring water if the provider allows drinks at the desk, and dress in layers for room temperature. Confirm with the provider whether food, drink, and personal items are permitted in the testing room.
Backup plan for technical failure
Note the provider's support or helpline number and have a phone nearby (but out of reach during the test) in case of a platform failure. Confirm the procedure for reporting a technical interruption and how it affects your time.
Mental preparation and time strategy
Decide in advance how you will pace yourself: answer confident items first, flag uncertain ones, and return to them. Know how much time you can spend per question on average so you do not run out of time on the final items.
Plan the day
Confirm your appointment, delivery format, ID requirements, and any software needs with the provider. Do a full revision pass over the ISO 18788 clause structure and the PDCA cycle, then take one timed practice set to identify weak areas. Stop learning new material after this point and consolidate what you already know.
Review your weak areas using your own notes and the standard's requirements. Re-read the definitions of key terms such as the security operations management system, interested parties, risk, and competence. Check travel or login logistics and prepare your ID and confirmation in one place.
Do a light review only: skim headings, key requirements, and any summary sheets. Avoid cramming new topics. Confirm the start time in your local time zone, set two alarms, prepare your workspace or bag, and get a normal night's sleep.
Eat a normal meal, avoid last-minute cramming, and arrive or connect early as the provider requires. Complete ID and system checks calmly. If remote, close other applications and silence notifications before the proctor session begins.
Read each question fully before looking at the options, watch for qualifiers, and answer the easiest items first. Flag uncertain questions and return to them. Keep an eye on the clock and reserve time to review flagged items. If a technical problem occurs, stop and contact the proctor or support immediately rather than troubleshooting alone.
Note anything you found difficult while it is fresh, and confirm with the provider how and when results are issued and what the retake or appeal process is, in case you need it.
Rules to check
Bring the ID document specified by the provider and be ready to show it on camera or at the desk. If your ID does not match your registration details, contact the provider before exam day; do not assume an exception will be made.
Treat the exam as closed-book unless the provider explicitly permits reference material. Do not use notes, phones, smart devices, or other people's help during the test.
Follow all proctor instructions, including room scans, desk clearance, and camera positioning for remote sittings. Confirm with the provider what is allowed at your desk before the test begins.
Do not communicate with anyone other than the proctor during the exam, and do not copy, photograph, or share exam content afterward. Exam content is confidential.
If you need a break, raise your hand or use the provider's stated procedure. Confirm with the provider whether breaks are allowed, whether the clock stops, and whether you may leave the camera view.
Understand the scoring rules before you start: the number of questions, the time limit, the pass mark, and whether incorrect answers are penalized. These are set by the certification body, so confirm current values with the provider.
If a technical failure or interruption occurs, report it to the proctor or support immediately and follow their instructions. Do not attempt to restart the exam on your own.
Arrive or connect by the time the provider specifies. Confirm with the provider the policy for late arrival, and note that missed appointments may forfeit your fee depending on their terms.