PECB ISO 18788 Lead Auditor study materials
PECB ISO 18788 Lead Auditor study resources

PECB ISO 18788 Lead Auditor exam-day guide

PECB ISO 18788 Lead Auditor · Prepare for the day ahead.

Your checklist

Valid government-issued photo ID

Bring the original ID (passport, driver's license, or national ID) that matches the name on your registration. Confirm with the provider which forms of ID are accepted and whether a secondary ID is required.

Exam appointment confirmation and login credentials

Have your confirmation email, candidate number, and any test-centre or proctoring login details ready. For online proctored exams, confirm the platform and system requirements with the provider in advance.

Approved reference standard (ISO 18788) and related normative references

If the provider allows open-book access to standards, bring only the permitted documents. Confirm with the provider whether the standard text, ISO 19011, and ISO/IEC 17021-1 are allowed and in what format (hard copy or searchable PDF).

Exam rules and candidate handbook reviewed

Read the provider's exam regulations on permitted materials, breaks, and misconduct. Policies vary, so confirm with the provider rather than relying on second-hand information.

Scratch paper and pen/pencil (if permitted)

Some providers supply or allow scratch paper for notes during the exam; others prohibit it. Confirm with the provider. If allowed, use it to jot down clause references and audit-process steps.

Reliable internet connection and quiet, private room (online proctored)

For remote exams, test your connection and webcam ahead of time. Clear your desk of unauthorized items and close other applications. Confirm the provider's room and desk requirements.

Backup plan for technical failure

Know the provider's support contact and their procedure if the platform fails. Have a phone available if the proctoring rules permit it, and confirm with the provider how to report a technical incident.

Time-management plan for question types

The PECB ISO 18788 Lead Auditor exam typically includes multiple-choice and essay/scenario questions. Confirm the exact format, number of questions, and time limit with the provider, then plan how many minutes to allocate per section.

Clause and annex map of ISO 18788

Prepare a one-page mental (or permitted written) map of the standard's structure: context, leadership, planning, support, operation, performance evaluation, and improvement, plus the security operations requirements and annexes. This helps locate references quickly.

Audit-process checklist (ISO 19011)

Review the audit programme, audit plan, opening meeting, evidence collection, sampling, findings, nonconformity grading, closing meeting, and follow-up. Be ready to apply these steps to security operations scenarios.

Understanding of key ISO 18788 concepts

Be able to explain security operations management principles, risk-based thinking, human rights considerations, stakeholder engagement, and the relationship between ISO 18788 and other management system standards.

Rest and logistics

Plan travel to the test centre or set up your remote exam space the day before. Get adequate sleep and eat beforehand. Confirm start time, time zone, and check-in requirements with the provider.

Plan the day

72 hours before the exam

Confirm all logistics with the provider: exam format, time limit, permitted materials, ID requirements, and platform or test-centre details. Re-read the candidate handbook. Take one full timed practice exam under exam conditions, then review every wrong answer against the standard and audit-process notes. Focus revision on weak areas: clause interpretation, audit evidence, and nonconformity writing.

24 hours before the exam

Do a light review only: skim your clause map, audit-process checklist, and key definitions. Prepare your ID, confirmation email, and any permitted reference materials. For online exams, run the system check and test your webcam and microphone. Set out clothing and travel details. Avoid cramming new material; prioritize sleep.

Morning of the exam

Eat a normal meal and hydrate. Arrive at the test centre early or log in to the proctoring platform ahead of time as instructed. Have your ID and confirmation ready. Do a final 10-minute review of your clause map and audit steps, then stop studying. Keep your desk clear of unauthorized items.

During the exam

Read each question carefully and note key verbs (identify, explain, evaluate). Answer multiple-choice questions first, flagging uncertain ones for review. For essay or scenario questions, structure answers clearly: state the clause or audit principle, apply it to the scenario, and give evidence-based reasoning. Watch the clock and reserve time to review flagged questions. If a technical issue occurs, notify the proctor or support immediately and follow the provider's procedure.

Rules to check

  • Bring the exact ID required by the provider; the name must match your registration. If you are unsure which documents are accepted, confirm with the provider before exam day.

  • Permitted materials vary by provider and exam format. Do not bring notes, standards, or devices unless the provider has explicitly allowed them; confirm the rules in advance.

  • Breaks are generally not permitted during the exam unless the provider's rules allow them. Confirm the break policy and any scheduled pauses with the provider.

  • Scoring and passing criteria are set by the provider. Do not assume a particular pass mark; confirm the scoring method and result timeline with the provider.

  • Maintain academic integrity: no communication with others, no unauthorized materials, and no sharing of exam content. Misconduct can lead to invalidation of results.

  • Follow proctor instructions at all times. For online exams, keep your face visible, stay in the camera frame, and avoid leaving the room except as permitted.

  • If you experience a technical failure, stop and contact the provider's support immediately. Do not attempt unauthorized troubleshooting that may violate exam rules.

  • Arrive or log in early. Late arrival may result in forfeiture of your exam slot; confirm the provider's late-arrival policy.