PECB ISO 37001 Transition exam-day guide
PECB ISO 37001 Transition · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the same ID document whose details you used at registration; the name must match exactly. If your ID uses a different script or a maiden name, confirm with the provider in advance which documents they accept.
Second form of identification
Some remote-proctoring providers ask for a second ID or a signature-matching check. Confirm with the provider whether one is required for your delivery mode.
Exam appointment confirmation
Have the confirmation email, booking reference, and any access link or candidate number ready in a place you can reach without searching. Save a screenshot in case email access is unavailable.
Quiet, well-lit, private room
For remote delivery, use a room with a closed door, no other people, a clear desk, and lighting on your face. Remove notes, books, and second screens from the desk and from the camera's field of view.
Stable internet and power
Test your connection and camera on the same machine and network you will use on exam day. Have a phone with data as a fallback for contacting support, and keep the charger plugged in.
Compatible browser and system check
Run the provider's system or equipment check in the days before the exam, not on the morning itself. Update the browser and disable VPNs, pop-up blockers, and notification-heavy apps.
Permitted reference materials
The ISO 37001 standard text is a common permitted reference in open-book professional exams, but permissions vary by delivery mode and provider. Confirm with the provider exactly which documents, tabs, and annotations are allowed before relying on this.
Understanding of the question format
Know in advance whether items are single-answer, multiple-response, scenario-based, or essay-style, and whether partial credit applies. Confirm with the provider if your invitation does not state this clearly.
Time budget written down
Note the total duration, the number of questions, and your target minutes per question on a blank sheet or mental plan. Build in a review block at the end rather than spending it all on the first pass.
Water, tissues, and any approved comfort items
Keep only items the provider explicitly allows within reach. Confirm with the provider whether drinks, medication, or tissues are permitted and whether they must be shown to the proctor first.
A plan for interruptions
Know the provider's support phone number or chat channel and keep it visible. If the connection drops, note the time and follow the provider's reconnection procedure rather than restarting the exam on your own.
Rest and logistics
Protect sleep in the two nights before, plan travel or room access so you arrive or log in early, and eat beforehand. Fatigue is a bigger score risk than one unfamiliar question.
Plan the day
Re-read your own summary of the ISO 37001 clauses that carry the most exam weight: the standard's requirements for the anti-bribery policy, leadership and governing body responsibilities, the compliance function and its independence, risk assessment, due diligence on projects, activities, and business associates, and the controls on gifts, hospitality, and donations. Do not start new material; consolidate what you already know.
Work through scenario-style practice: given a described organization, identify which clause applies, what evidence an auditor would look for, and what the organization must do next. Transition exams often test the difference between what the standard requires and what is merely good practice.
Run the provider's system or equipment check and confirm your appointment time in local time, including any daylight-saving difference. Resolve ID or name-mismatch issues with the provider now, not later.
Review the structure of the standard as a map: context of the organization, leadership, planning, support, operation, performance evaluation, and improvement. Being able to place a requirement in the right clause quickly saves minutes on scenario questions.
Revisit the concepts candidates most often confuse: bribery risk versus fraud risk, due diligence versus monitoring, the compliance function's reporting line versus the governing body's oversight, and nonconformity versus observation in an audit context.
Do a light review only: your own notes, a one-page list of clause numbers, and the definitions. Stop studying early enough to sleep well. Heavy new reading the night before tends to displace recall rather than add it.
Prepare the exam space and the checklist items: ID, confirmation, charger, water, permitted materials, and a clean desk. Confirm the room will be free of other people for the whole session.
Confirm the start time, the access link, and the support contact. Charge your devices and, for remote delivery, plan a backup connection.
Eat, hydrate, and avoid last-minute cramming of unfamiliar material. A brief glance at your clause map is fine; discovering a topic you never studied is not helpful at this point.
Log in or arrive well before the start time to allow for identity checks, room scans, and proctor instructions. Keep your ID in hand and your desk clear.
Read each scenario question twice and identify what is being asked: the requirement, the evidence, the next step, or the responsibility. Watch for words like 'first', 'primarily', and 'most appropriate', which change the answer.
Answer the questions you know first, flag uncertain ones, and return to them. For multiple-response items, count how many options the question asks for and check you have selected exactly that number.
For scenario items, eliminate options that describe good practice but are not required by the standard, and options that assign responsibility to the wrong role. The compliance function supports and advises; the governing body and top management carry oversight and decision authority.
Reserve the final portion of your time for flagged questions and a consistency check. Do not leave answers blank unless the format penalizes guessing; confirm with the provider whether unanswered items score as zero.
Note which topics felt weak while the memory is fresh. If you need to retake, this list is more useful than a generic syllabus review.
Rules to check
Bring the ID document used at registration and present it when asked. The name on the ID must match your registration record; if it does not, contact the provider before exam day to correct it.
Follow the provider's rules on permitted materials. If the exam is open-book, use only the documents the provider allows and do not open other tabs, applications, or search engines. Confirm the exact list with the provider.
Do not communicate with anyone other than the proctor during the exam, and do not let another person enter the room. For remote delivery, keep the camera and microphone on as instructed and stay in frame.
Take breaks only as the provider permits. For remotely proctored exams, leaving the camera view may end the session; confirm the break policy with the provider before you start.
If a technical failure occurs, stop and contact the provider's support channel, and follow their instructions on resuming. Do not attempt to restart or extend the exam on your own.
Scoring and pass marks are set by the provider and may vary by exam version and delivery mode. Do not assume a particular number of correct answers is sufficient; confirm the pass criterion and any partial-credit rules with the provider.
Answers should reflect the requirements of ISO 37001 as written, not your organization's local practice. Where a scenario describes a reasonable-sounding but non-required action, treat the standard's requirement as the deciding factor.
Academic integrity rules apply: no sharing of exam content, no recording of questions, and no use of unauthorized assistance. Breaches are handled under the provider's code of conduct, which you should read before the exam.