PECB ISO 28000 Foundation exam-day guide
PECB ISO 28000 Foundation · Prepare for the day ahead.
Your checklist
Confirm exam delivery format and platform
Before the final 72 hours, confirm with the provider whether your ISO 28000 Foundation exam is delivered at a test centre, as an online-proctored session, or as an in-person paper exam. The format determines what you may bring and how identity checks work. Do not assume; verify the delivery mode in the candidate handbook or your exam confirmation email.
Valid government-issued photo ID
Bring the original, unexpired identity document whose name matches your exam registration exactly. Acceptable document types vary by provider and country (passport, national ID card, driver's licence). Confirm the accepted ID list with the provider in advance; a photocopy or expired document is commonly rejected.
Exam appointment confirmation and candidate number
Have your appointment confirmation, registration number, and any candidate ID available, either printed or accessible on a device if the provider permits. For online delivery, keep the confirmation email open in case the proctor asks you to verify session details.
Know the exam structure and scoring rule
Confirm with the provider the number of questions, time allowance, question format (typically multiple-choice), pass mark, and whether wrong answers are penalised. The PECB ISO 28000 Foundation exam is commonly a closed-book, multiple-choice exam, but verify the current structure and pass mark rather than relying on memory.
Closed-book environment: remove study materials
Unless the provider explicitly states the exam is open-book, clear the area of notes, textbooks, printed standards, sticky notes, and phone apps. For online exams, the proctor may require a 360-degree room scan and a clear desk. Confirm the permitted-materials rule with the provider.
Test your equipment and connection (online delivery)
If the exam is online-proctored, run the platform's system check at least 24 hours ahead: webcam, microphone, browser version, and bandwidth. Have a backup connection (mobile hotspot) and a phone number for provider support in case of technical failure.
Quiet, private, well-lit room
Arrange a room where you will not be interrupted, with a door you can close, adequate lighting on your face, and a plain background if possible. Tell household members your exam window so they do not enter. For test-centre delivery this item does not apply.
Plan arrival or login time with buffer
For a test centre, arrive earlier than the reporting time stated in your confirmation and account for transport delays, parking, and security screening. For online delivery, log in before the scheduled start to complete identity verification and the room scan without eating into exam time.
Review the ISO 28000 scope and key concepts, not new material
In the final day, review the structure of ISO 28000 (security management systems for the supply chain), the meaning of a security management system, risk-based thinking, PDCA, and the relationship to related standards such as ISO 28001 and ISO 28003. Do not try to memorise clause numbers you have not already learned.
Prepare logistics: water, medication, comfort
Confirm with the provider whether food, drink, or medication are allowed in the exam room and under what conditions. For a test centre, check locker or storage rules for personal items. Avoid heavy meals and excessive caffeine immediately before the exam.
Confirm break and timing rules
Ask the provider in advance whether scheduled or unscheduled breaks are permitted, whether the clock stops during a break, and whether leaving the camera view during an online exam ends the session. Do not assume breaks are allowed; plan hydration and restroom visits around the exam window.
Know how results and certificates are issued
Confirm with the provider whether preliminary results appear at the end of the exam, when official results are released, how to appeal a result, and how the certificate is delivered. Record the support contact for post-exam queries.
Plan the day
Re-read your own summary notes on the ISO 28000 security management system model: context of the organisation, leadership, planning including risk assessment and risk treatment, support, operation, performance evaluation, and improvement. Practise a handful of scenario questions on risk treatment and supply-chain security objectives. Confirm delivery format, ID requirements, permitted materials, and pass mark with the provider. Do not start new topics this late.
Run the technical system check for online delivery and book a quiet room. If travelling to a test centre, confirm the address, reporting time, and route. Prepare the exact ID document you will present and check that it is unexpired and the name matches your registration.
Do a light review only: key definitions such as security management system, risk, interested party, and the PDCA cycle as applied to a security management system. Stop studying early enough to sleep well. Avoid last-minute cramming that increases anxiety and reduces recall.
Lay out what you will bring: ID, appointment confirmation, and any provider-approved items. For online delivery, charge devices, test the webcam and microphone again, and note the provider support number. Set two alarms.
Eat a normal meal, hydrate moderately, and avoid alcohol or excessive caffeine. Re-read only a one-page summary of core concepts. Log in or arrive with buffer time; complete identity verification and any room scan calmly.
Read each question fully and watch for qualifiers such as 'most likely', 'primary', or 'not'. Answer the straightforward questions first, flag uncertain ones, and return to them if the platform allows review. For scenario questions, identify the clause area being tested (for example, planning versus operation) before choosing. Manage the clock: divide the total time by the number of questions to get a rough per-question budget and check your pace at the halfway point.
If a technical problem occurs during an online exam, do not keep clicking; note the time and contact provider support immediately, as session recovery rules vary. If you finish early, use remaining time to check that every question is answered and that flagged items were reviewed, then submit deliberately.
Rules to check
Present the original, unexpired government-issued photo ID whose name matches your registration. The accepted document list varies by provider and country, so confirm it in advance; expired or photocopied ID is commonly refused.
The exam is typically closed-book unless the provider states otherwise. Keep notes, textbooks, the standard itself, smart devices, and unauthorised applications out of reach; for online delivery, comply with room scans and desk-clear instructions.
Follow all proctor instructions. During an online exam, remain in camera view, do not speak to others, and do not leave the room unless the provider's rules explicitly allow it. Failure to comply can lead to session termination or invalidation.
Confirm break policy with the provider before exam day. Whether breaks are allowed, whether the timer pauses, and what happens if you leave the camera view are provider-specific and should not be assumed.
Do not communicate with other candidates about exam content during or after the session, and do not reproduce or share questions. This protects exam integrity and your own certification standing.
Scoring rules, including the pass mark and whether incorrect answers are penalised, are set by the provider. Confirm the current rule before the exam rather than relying on second-hand information.
If you experience a technical failure, report it to provider support as soon as possible and keep any reference number. Outcomes for disrupted sessions depend on the provider's policy, so confirm the process in advance.
Arrive or log in before the scheduled start to complete verification. Late entry may be refused or may reduce your available exam time; check the provider's late-arrival rule.