ISO 27400 Foundation exam-day guide
ISO 27400 Foundation · Prepare for the day ahead.
Your checklist
Valid government-issued photo ID
Bring the original ID (passport, driver's licence, or national ID) that matches the name on your registration. Confirm with the provider which ID types are accepted and whether a secondary ID is required; do not rely on a photocopy or digital copy unless the provider explicitly allows it.
Exam appointment confirmation and candidate number
Have the confirmation email or appointment number accessible (printed or on your phone if permitted). You may need it at check-in. Confirm with the provider whether printed confirmation is mandatory.
Know the test centre location and travel plan
For an in-person test, verify the address, building entrance, and arrival time at least 24 hours ahead. Plan to arrive 30 minutes early; late arrival may mean refused entry. Confirm with the provider the exact arrival cutoff.
Remote-proctoring system check completed
If testing online, run the provider's system test (camera, microphone, browser lock, bandwidth) on the same computer and network you will use. Confirm with the provider the required platform and any prohibited software.
Quiet, well-lit room with a stable internet connection (remote exams)
Use a private room with a door you can close, a clear desk, and a power outlet. Inform household members not to enter during the exam. Confirm with the provider the room and desk rules, including whether a whiteboard or blank paper is allowed.
Acceptable calculator or none, as permitted
ISO 27400 is a management-system standard; most foundation exams do not require a calculator. Confirm with the provider whether any calculator, reference sheet, or scratch paper is allowed, and which model if so.
Review the exam format and scoring rules
Know the number of questions, time limit, question type (typically multiple-choice), pass mark, and whether wrong answers are penalised. These are set by the certification body; confirm with the provider rather than assuming.
Prepare your break and comfort plan
Eat a normal meal, hydrate, and use the restroom before check-in. For in-person exams, confirm with the provider whether supervised breaks are allowed and whether the clock stops. For remote exams, breaks are often not permitted; confirm with the provider.
Remove prohibited items before entering
Phones, smartwatches, notes, and bags are usually stored or banned in the testing room. Confirm with the provider the list of prohibited items and the storage arrangements.
Know the key definitions and scope of ISO 27400
Be able to state the standard's purpose, scope, and core concepts (for example, the meaning of 'wearable electronic device' and 'smart personal protective equipment' as used in the standard). Do not memorise clause numbers you are unsure of; focus on concepts. If you are unsure of a definition, check the standard text you are permitted to use before exam day.
Confirm rescheduling and cancellation policy
Know the deadline and fees for changing your appointment. Confirm with the provider the exact policy; do not assume a free reschedule window.
Backup plan for technology failure (remote exams)
Have the provider's support phone number and a backup internet option (for example, a mobile hotspot) ready. Confirm with the provider how a disconnection is handled and whether time is restored.
Plan the day
Confirm the appointment details: date, time, time zone, location or remote link, and ID requirements. Re-read the provider's candidate handbook. Run any required system test if you have not already. Take one full-length practice test under timed conditions and review every wrong answer against the standard's concepts, not against memorised question banks. Stop learning new material after this point; consolidate what you know.
Prepare your ID, confirmation, and any permitted items in one place. Check travel time and transport for an in-person exam, or clear your desk and test your camera and microphone for a remote exam. Avoid cramming late into the night; sleep 7–8 hours. Skim only your own summary notes, focusing on the scope, key terms, and the structure of a management-system standard (context, leadership, planning, support, operation, performance evaluation, improvement). Do not attempt new practice questions.
Eat a normal breakfast and hydrate. Arrive at the test centre about 30 minutes early, or log in to the remote proctoring session at the time the provider specifies. Use the restroom before check-in. Leave phones and smartwatches stored as instructed. Do a final 10-minute review of your summary sheet only, then put it away.
Read each question fully and watch for qualifiers such as 'not', 'best', and 'primary'. Answer every question unless the provider states that wrong answers are penalised; if unsure, flag it and return later. Manage the clock: divide the total time by the number of questions to get a per-question budget, and stick to it. For scenario questions, ask what a management-system standard would require, not what seems operationally convenient. If a technical problem occurs, note the time and contact the proctor or support immediately.
Rules to check
Bring the original government-issued photo ID that matches your registration name exactly. Confirm with the provider which ID types are accepted and whether a second form of ID is required; a photocopy or expired ID is normally refused.
Arrive or log in at the time the provider specifies. Late arrivals may be refused entry or have time deducted. Confirm with the provider the exact arrival cutoff and the procedure for remote check-in.
Do not bring or use unauthorised materials: phones, smartwatches, notes, books, or unapproved software. For remote exams, keep your face and workspace visible and do not leave the camera view. Confirm with the provider the full list of prohibited items and permitted aids.
Follow the proctor's instructions at all times. If you need to leave your seat, raise your hand or use the agreed chat channel and wait for permission. Unauthorised movement or talking may lead to invalidation.
Breaks are governed by the provider. Confirm with the provider whether scheduled or unscheduled breaks are allowed, whether the exam clock stops, and what you may access during a break. Do not assume a break is permitted.
Scoring is set by the certification body: typically a scaled score or a pass mark on multiple-choice questions. Confirm with the provider the number of questions, time limit, pass mark, and whether wrong answers are penalised. Results are usually issued after the exam, not always immediately.
Do not attempt to record, photograph, or share exam content. Reproduction of questions is prohibited and may result in cancellation of your result and further sanctions. Confirm with the provider the confidentiality terms you agreed to.
If a technical failure or emergency occurs, stop and notify the proctor or support immediately, and record the time. Confirm with the provider how incidents are handled and whether lost time is restored or the exam is rescheduled.