PECB ISO 28000 Lead Auditor exam-day guide
PECB ISO 28000 Lead Auditor · Prepare for the day ahead.
Your checklist
Confirm the exam format and delivery method with the provider
PECB exams are typically delivered online with remote proctoring or at an authorized test center, and the exact format can vary by booking. Confirm in your candidate account whether your session is remote-proctored or in-person, and note the start time in your local time zone. If anything in the confirmation email is ambiguous, contact the provider directly rather than assuming.
Verify your government-issued photo ID is valid and matches your registration name
Remote proctoring and test centers generally require a valid government-issued photo ID whose name matches the name on your exam registration. Check the expiry date and that the name spelling matches exactly. If your ID name differs from your registration (for example, a shortened first name), confirm with the provider in advance how to resolve it.
Do a full technology dry run on the same device and network you will use
Test the exam platform's system check on your actual exam-day computer: browser version, webcam, microphone, and internet stability. Close background applications that may conflict with the proctoring software. If your organization blocks downloads or installs, request an exception from IT well before exam day.
Prepare a quiet, private, well-lit room
Remote proctoring usually requires a private room with a closed door, a clear desk, and lighting that makes your face and ID clearly visible. Inform household members of your exam window so you are not interrupted. Remove papers, notes, phones, and smart devices from the desk area unless the provider explicitly permits specific items.
Know which reference materials, if any, are permitted
Some PECB exams are open-book with respect to the standard itself, while others are closed-book; the rules depend on the specific exam and your booking. Do not assume. Confirm with the provider which documents (for example, a printed copy of ISO 28000) may be at your desk, and in what format. If in doubt, treat the exam as closed-book.
Review the exam blueprint and question style
PECB Lead Auditor exams are typically scenario-based, multiple-choice, and assess audit principles, the standard's requirements, and auditor competence rather than pure recall. Re-read the candidate handbook for the number of questions, time allowed, pass mark, and whether the exam is open or closed book. These details are set by the provider; confirm them from your own booking rather than from second-hand sources.
Prepare your audit-thinking framework on one page (for study, not for the desk)
Summarize the audit process in your own words: establishing audit objectives and scope, document review, audit plan, opening meeting, evidence collection through interviews, observation and sampling, findings and nonconformity classification, closing meeting, report, and follow-up. Use this as a revision aid before the exam; do not bring it into the exam unless the provider allows notes.
Rehearse nonconformity classification
Practice distinguishing major nonconformities, minor nonconformities, observations, and opportunities for improvement using your own hypothetical scenarios. Be ready to explain why a finding is a nonconformity by citing the clause and the objective evidence. This is a frequent source of lost marks in lead auditor exams.
Confirm timing, breaks, and late-arrival rules with the provider
Check how early you should log in or arrive, what happens if you are late, and whether breaks are permitted and whether the clock stops during them. Policies differ between remote and in-person delivery, so verify the specific rules for your session with the provider.
Plan food, water, and medication around the exam window
If breaks are limited, eat a proper meal beforehand, keep water within reach if permitted, and take any prescribed medication on schedule. Avoid heavy caffeine if you are sensitive to it. Confirm with the provider whether drinks are allowed at the desk under proctoring rules.
Back up your internet connection
Have a mobile hotspot or tethering option ready in case your primary connection drops. Know how to reconnect to the exam platform and what the provider's policy is for technical interruptions. Report any interruption to the proctor immediately rather than trying to fix it silently.
Sleep, and stop cramming new material the night before
The final evening is better spent on light review of your own summary notes and a full night's sleep than on new topics. Fatigue is a common cause of misreading scenario questions. Treat rest as part of exam preparation.
Plan the day
Re-read the official exam candidate handbook and your booking confirmation. Confirm the delivery method, start time in your local time zone, ID requirements, permitted materials, and break policy. Resolve any discrepancy with the provider now, not on exam day.
Complete a full technology check on your exam device: platform system test, webcam, microphone, browser, and network. Install or update anything required, and note your organization's IT contact in case an install needs approval.
Do one or two timed practice sets under exam-like conditions. Review every wrong answer and write a one-line reason for the correct answer in your own words. Focus on scenario interpretation and nonconformity classification.
Consolidate revision into a single page per topic area: the ISO 28000 requirements structure, security risk assessment and risk management concepts, and the audit lifecycle. Rewrite from memory, then check against the standard.
Do a light pass over your summary notes only. Do not start new topics. Confirm the room setup, desk clearance, and that your ID is ready. Charge devices and test the hotspot.
Confirm the exact login or arrival time and set two alarms. Tell household members your exam window. Prepare clothes and any permitted items so the morning is frictionless.
Eat a proper meal, hydrate, and avoid last-minute cramming. Log in or arrive early per the provider's instructions. Have your photo ID within reach and your desk clear before the proctor check begins.
Read each scenario fully before looking at the options, and identify what the question is actually asking (for example, the next action, the best evidence, or the correct classification). Answer confidently, flag uncertain items, and return to them if the platform allows review.
Pace yourself against the number of questions and time allowed. If you are stuck, eliminate clearly wrong options, choose the best remaining answer, and move on. Reserve the final minutes to check that every question is answered.
Note which topics felt weak while the memory is fresh. If the provider gives a result timeline, record it and check your candidate account as instructed. Do not share exam content with others.
Rules to check
Bring a valid government-issued photo ID whose name matches your exam registration. If it does not match, confirm with the provider before exam day how to proceed; do not attempt to sit the exam with mismatched identification.
Follow the proctor's instructions at all times. In remote sessions, comply with room scans, desk clearance, and requests to show your ID or surroundings. Refusal or non-cooperation can lead to your session being terminated.
Do not use unauthorized materials, notes, devices, or assistance. Whether the exam is open or closed book depends on the specific exam and your booking, so confirm with the provider which references are permitted and keep everything else away from your desk.
Breaks and clock-stopping rules vary by delivery method. Ask the proctor or check the provider's policy before the exam starts; do not assume that leaving the camera view is allowed.
Scoring and the pass mark are set by the provider and stated in the candidate handbook. Confirm the current pass mark and result timeline from your own booking rather than relying on second-hand claims.
Report any technical problem, interruption, or suspected irregularity to the proctor immediately. Do not attempt to troubleshoot silently or restart the exam on your own.
Keep exam content confidential. Do not reproduce, discuss, or share questions or scenarios after the exam; doing so may breach the provider's code of conduct.
If any rule in your confirmation email conflicts with general guidance you have read elsewhere, follow your provider's written instructions and ask them to clarify in advance.