ISO/IEC 27002 Foundation exam-day guide
ISO/IEC 27002 Foundation · Prepare for the day ahead.
Your checklist
Confirm exam format and delivery mode with the provider
ISO/IEC 27002 Foundation is offered by multiple certification bodies, and the number of questions, time limit, pass mark, and whether the exam is remote-proctored or taken at a test centre vary by provider. Check your booking confirmation and candidate handbook rather than relying on second-hand information. If anything is unclear, confirm with the provider before exam day.
Valid government-issued photo ID
Bring the exact ID document named in your booking. The name must match your registration. For remote exams, the proctor will usually ask you to hold it up to the camera; for test-centre exams, staff check it at reception. Confirm accepted ID types with the provider if you plan to use anything other than a passport or national identity card.
Booking confirmation and candidate number
Keep a digital and printed copy of your appointment confirmation. It contains the session code, start time in the correct time zone, and support contact numbers if the platform fails.
Know the standard's structure cold
Be able to state that ISO/IEC 27002 is a code of practice giving implementation guidance for the information security controls listed in ISO/IEC 27001 Annex A, organised into four themes: organisational, people, physical, and technological. Questions often test which theme a control belongs to.
Revise the control themes and clause numbering logic
The 2022 edition has 93 controls across 4 themes. Learn the theme prefixes (5 organisational, 6 people, 7 physical, 8 technological) and the purpose of each theme so you can place an unfamiliar control correctly.
Memorise the distinction between 27001 and 27002
27001 contains certifiable requirements for an ISMS; 27002 provides guidance and is not used for certification on its own. Expect several questions that hinge on this difference.
Prepare your remote-testing environment (if applicable)
Clear the desk, close other applications, test your camera, microphone, and internet connection, and have a power cable ready. Check the provider's rules on permitted items such as water, tissues, and scrap paper, since these differ between providers.
Plan travel and arrival buffer
For a test centre, arrive with time to spare for security checks and ID verification. For a remote exam, log in early enough to complete the system check and room scan without eating into your exam time.
Know the question navigation and flagging tools
Practise with the provider's demo or tutorial if one is offered. Knowing how to flag, review, and change answers reduces wasted time and panic during the exam.
Sleep, hydration, and a light meal
Avoid last-minute cramming the night before. A rested candidate reads scenario questions more accurately, which matters because many items are worded as short scenarios rather than definitions.
Plan the day
Do a full pass over the four control themes and write a one-line purpose for each. Then take one timed practice paper under exam conditions to identify weak areas. Spend the remaining time on those areas rather than re-reading everything.
Re-read your notes on the relationship between ISO/IEC 27001, 27002, and the wider 27000 family, including the role of risk assessment in selecting controls. Confirm the exact exam logistics (start time, platform link, ID requirements) with the provider now so problems can be resolved early.
Light revision only: skim control names and theme groupings, review your own summary sheet, and stop studying by early evening. Check your equipment, charge devices, lay out your ID and confirmation, and confirm the time zone of your appointment.
If taking the exam remotely, run the provider's system test at the same time of day as your appointment so you know the connection and camera work. Clear the room of notes and devices per the provider's rules. Confirm with the provider whether any items are permitted at your desk.
Eat a proper meal, avoid heavy caffeine if you are prone to anxiety, and do a 20-minute skim of your summary sheet only. Log in or arrive early, complete ID checks calmly, and read the instructions screen fully before starting.
Read each question twice and watch for qualifiers such as 'most likely', 'primary', or 'not'. Answer the straightforward items first, flag long scenario questions, and return to them. Eliminate clearly wrong options before choosing. Keep an eye on the clock and reserve the final minutes to review flagged items and confirm no question is left blank unless the provider penalises guessing, which you should confirm with the provider.
Rules to check
Present the ID document named in your booking; the name must match your registration, and refusal or mismatch can result in being turned away without a refund. Confirm acceptable ID with the provider in advance.
Follow the provider's rules on permitted materials and desk items. For remote exams this typically means an empty desk apart from approved items; for test centres, personal belongings are stored away. Ask the provider rather than guessing.
Do not communicate with anyone other than the invigilator or proctor during the exam, and do not attempt to capture, copy, or share exam content. Such conduct is treated as misconduct and can lead to invalidation of your result.
If you need a break, raise your hand or use the provider's stated procedure; unapproved leaving of the camera view or exam room may end your session. Confirm the break policy with the provider before exam day.
Technical failures should be reported immediately to the proctor or support line and documented; do not attempt to fix serious issues alone or restart the exam without guidance. The provider decides on rescheduling or score adjustments.
Scoring rules, including the pass mark and whether incorrect answers are penalised, are set by the provider. Confirm these details with the provider and answer accordingly; if there is no penalty, leave no question unanswered.
Arrive or log in early enough to complete checks; late arrival may reduce your exam time or prevent entry, depending on the provider's policy. Confirm the cut-off with the provider.
Keep your result confidential until officially released; provisional scores shown on screen may not be final, and the provider's written confirmation is authoritative.