PECB ISO 28000 Transition exam-day guide
PECB ISO 28000 Transition · Prepare for the day ahead.
Your checklist
Valid government-issued photo ID
Bring the same ID document whose details you used at registration; the name must match your booking. Accepted document types and any secondary-ID requirement vary by delivery mode, so confirm with the provider which documents are accepted for your remote or in-person slot.
Exam appointment confirmation and candidate number
Have your booking confirmation, candidate/registration number, and the provider's support contact saved offline (screenshot or printed) so you can reach support quickly if the session fails to launch.
Exam-day logistics confirmed (time zone, venue or platform link)
Re-check the start time in your local zone against the confirmation, since provider systems often display UTC. For remote delivery, test the link and system check in advance; for a test centre, confirm address, arrival time, and parking or transit. Exact arrival and check-in windows: confirm with the provider.
Exam format and permitted-reference rules confirmed
Confirm whether your sitting is open-book or closed-book and which documents (for example the ISO 28000 standard text or your own notes) may be consulted. Do not assume the transition exam mirrors the foundation exam format; confirm with the provider.
Permitted items list checked
Clarify in advance what is allowed at your desk: water in a clear container, tissues, pen and blank paper, calculator. Many providers prohibit notes, phones, and smart watches in a closed-book sitting; confirm the permitted-items list with the provider.
Quiet, private room prepared (remote sittings)
Use a room with a door you can close, a clear desk, good lighting, and a stable wired or strong Wi-Fi connection. Tell household members not to enter during the session; proctors commonly flag interruptions or background voices.
Computer and browser ready (remote sittings)
Run the provider's system check on the same device and browser you will use, update the browser, close other applications, and disable notifications. Have a backup plan (phone hotspot, second device) in case of failure.
Power and connectivity backup
Charge laptop and phone, keep chargers within reach, and know the provider's reconnection or incident procedure so a short outage does not cost you the attempt.
Scope of the transition exam reviewed
Re-read the provider's exam blueprint for this transition exam so you know which ISO 28000:2022 content and which changes from the previous edition are in scope, and how many questions and how much time you will have. Confirm the blueprint with the provider rather than relying on second-hand summaries.
Weak areas rehearsed with scenario questions
Spend the last days on applied, scenario-style practice covering security management system context, risk assessment, controls, monitoring and measurement, and management review, plus the transition-specific changes. Practise justifying an answer from the standard's requirements.
Scoring and result rules understood
Know the pass mark, question format (for example multiple choice or scenario-based items), whether negative marking applies, and when results are released. These details differ by provider; confirm with the provider.
Break and timing strategy decided
Check whether scheduled or unscheduled breaks are permitted and how they affect the clock. Plan to flag uncertain questions and return to them rather than stalling on one item.
Plan the day
Confirm every administrative detail: appointment time and time zone, delivery mode, ID requirements, permitted references, and the exam blueprint. Run the system check if remote. Then shift to revision: work through the transition-relevant changes in ISO 28000:2022 and the core clauses (context of the organization, leadership, planning and risk, support, operation, performance evaluation, improvement), answering scenario questions and writing short justifications. Stop adding new material 24 hours out.
Do a light review of your own summary notes and the questions you got wrong, not a full re-read of the standard. Prepare the desk and device, charge equipment, lay out ID and confirmation, and check the route or platform link. Sleep a full night; avoid cramming late, which costs more in attention than it gains in recall.
Eat, hydrate, and arrive or log in early according to the provider's check-in window. Re-run the system check, close background apps, silence devices, clear your desk of prohibited items, and keep ID and confirmation in reach. Do a short breathing exercise and a five-minute skim of your key clause reminders; do not start new topics.
Read the stem carefully to identify what is being asked (for example a requirement, a risk treatment action, or a monitoring activity) and eliminate options that are merely good practice but not required by the standard. Answer confident items first, flag and skip long scenarios, and watch the clock so you reserve time to revisit flagged questions. If a technical failure occurs, note the time and contact support immediately rather than troubleshooting alone. Use any permitted break to reset, and review only flagged items at the end.
Rules to check
Present the ID document registered for the exam; the name must match your booking. If your ID has changed or the names differ, resolve it with the provider before the exam day rather than at check-in.
Follow the provider's conduct rules for your delivery mode: no unauthorized materials, no phones or smart watches at the desk, no communication with third parties, and no leaving the camera view during a remote proctored session. Confirm the exact rules with the provider.
Ask before acting if a rule is unclear. During a remote session, request permission before adjusting your camera, leaving the desk, or using a permitted item; during an in-person sitting, raise your hand for the invigilator.
Breaks are governed by the provider's policy and may not stop the clock. Confirm in advance whether breaks are allowed, whether they are scheduled, and what re-entry checks apply.
Scoring follows the provider's published scheme (pass mark, question weighting, and any penalty rules). Do not rely on forum claims; confirm the scoring rules with the provider.
Report technical or environmental incidents immediately and follow the provider's incident procedure; a documented incident is easier to resolve than a silent gap in your session.
Do not share, record, or reproduce exam content afterward. Attempting to capture questions violates candidate agreements and can invalidate your result.
If you are unwell or cannot sit the exam, contact the provider before the start time to ask about rescheduling or withdrawal; last-minute no-shows are usually handled under the provider's cancellation policy, which you should confirm.