ISO/IEC 27005 Lead Risk Manager exam-day guide
ISO/IEC 27005 Lead Risk Manager · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the original, unexpired ID (passport or national ID card) whose name exactly matches your registration. Confirm with the provider which ID types are accepted and whether a secondary ID is required.
Exam appointment confirmation
Print or save offline the confirmation email showing your appointment time, test centre address or online proctoring link, and any candidate number. Do not rely on a live internet connection to retrieve it at the venue.
Know the delivery format and platform
Confirm with the provider whether the exam is paper-based, at a test centre, or online-proctored, and which platform is used. Practise logging in and running any system check at least 48 hours before the exam.
Review the official exam syllabus or scope statement
Use the provider's published syllabus to map ISO/IEC 27005 clauses and annexes to exam topics. Do not assume the exact weighting; confirm the structure with the provider.
Consolidate ISO/IEC 27005 core concepts
Be able to explain the risk management process (context establishment, risk identification, analysis, evaluation, treatment, acceptance, communication and consultation, monitoring and review) and the relationship between ISO/IEC 27005, ISO/IEC 27001 and ISO 31000.
Prepare a one-page formula and terminology sheet
Include risk = likelihood × impact, risk criteria, risk appetite and tolerance, residual risk, risk owner, asset, threat, vulnerability, control and consequence. Use it for revision only; confirm with the provider whether any notes are allowed in the exam.
Practise scenario and multiple-choice questions under time
Complete at least two timed practice sets. Focus on distinguishing risk treatment options (modify, retain, avoid, share) and on selecting the best answer when two options are plausible.
Plan travel and arrival buffer
For a test centre, arrive at least 30 minutes early and check local transport disruptions. For online proctoring, confirm the room, lighting, desk clearance and quiet environment requirements with the provider.
Confirm permitted items and break policy
Ask the provider whether water, snacks, tissues, watches, calculators or dictionaries are allowed and whether unscheduled breaks are permitted. Policies vary; do not assume.
Check scoring and result timeline
Confirm with the provider the pass mark, whether scoring is criterion-referenced, whether negative marking applies, and when results are released. Do not rely on second-hand claims.
Prepare for accessibility or language accommodations
If you need extra time, a separate room, a screen reader or a language accommodation, confirm approval with the provider well before exam day and bring any approval letter.
Backup plan for technology failure
For online exams, have a phone with the proctor support number, a charged backup device if permitted, and a stable wired or hotspot connection. Confirm with the provider what happens if the connection drops.
Plan the day
Re-read the official syllabus and your own summary of ISO/IEC 27005. Identify the two or three areas where practice scores are weakest and revise only those. Stop learning new material after this point.
Run the full system check for online proctoring or confirm the test centre address, opening hours and ID requirements. Print the appointment confirmation and store it with your ID.
Take one full timed mock exam under realistic conditions. Review every wrong answer and write a one-line reason for the correct choice. Do not memorise question wording; focus on the underlying ISO/IEC 27005 concept.
Do a light review of your one-page formula and terminology sheet, the risk treatment options and the risk management process steps. Pack your ID, confirmation, permitted items and any accommodation letter.
Confirm the start time in your local time zone, set two alarms and plan the route or the quiet room setup. Avoid last-minute study of unfamiliar material; sleep at least seven hours if possible.
Eat a normal meal and hydrate. Arrive at the test centre at least 30 minutes early, or log in to the proctoring platform 15 to 30 minutes before the start time as instructed by the provider.
Leave non-permitted items at home or in a locker. Keep your ID and confirmation accessible for check-in. Do not discuss exam content with other candidates.
Read each question fully and identify the key ISO/IEC 27005 concept being tested. Answer easy questions first, flag uncertain ones and return to them. For scenario questions, eliminate options that confuse risk treatment with risk assessment or that use non-standard terminology.
Manage the clock: divide the total time by the number of questions to get an average pace, and check progress at the halfway point. If a question is taking too long, make a best guess, flag it and move on.
Use any permitted breaks as instructed by the provider. Before submitting, review flagged questions and confirm that every question has an answer if the platform requires it. Note any technical issue immediately and ask the proctor or invigilator to log it.
Rules to check
Bring the original government-issued photo ID whose name matches your registration exactly. Confirm with the provider which ID types are accepted and whether a second form of ID is required; photocopies and expired documents are normally refused.
Follow the provider's rules on permitted items. Unless the provider confirms otherwise, assume that phones, smart watches, notes, books and unauthorised calculators must be stored away, and that possession during the exam may lead to invalidation.
Do not communicate with other candidates during the exam and do not share, record or reproduce exam questions afterwards. Treat all exam content as confidential and follow the provider's candidate agreement.
For online-proctored exams, keep your face and workspace visible, do not leave the camera view without permission, and follow the proctor's instructions for room scans and breaks. Confirm the provider's specific environment rules in advance.
Breaks are governed by the provider's policy. Confirm whether unscheduled breaks are allowed, whether the clock stops, and whether you must remain under supervision. Do not assume that leaving the room is permitted.
Scoring, pass marks and result timelines are set by the provider. Confirm the pass mark, whether negative marking applies and when results are issued; do not rely on unofficial sources.
If a technical failure or disturbance occurs, notify the invigilator or proctor immediately and ask for the incident to be recorded. Follow the provider's incident procedure rather than attempting to fix the platform yourself.
Arrive or log in early as instructed by the provider. Late arrival may result in refusal of entry or reduced time, and the provider's late-arrival policy should be confirmed before exam day.