ISO/IEC 27701 Foundation exam-day guide
ISO/IEC 27701 Foundation · Prepare for the day ahead.
Your checklist
Valid government-issued photo ID
Bring the original ID (passport, national ID card, or driver's licence) whose name exactly matches your exam registration. Check the provider's accepted ID list in advance; photocopies and expired documents are normally refused. If your ID is borderline, confirm with the provider before exam day.
Exam appointment confirmation and login details
Have your booking confirmation, candidate number, and the username/password for the testing platform or certification body portal saved offline (screenshot or printout) so you are not dependent on email access at the last minute.
Knowledge of the exam format and logistics
Confirm the delivery mode (online proctored or test centre), duration, number of questions, and pass mark with the provider. ISO/IEC 27701 Foundation exams vary by certification body, so do not assume a format from another scheme.
Stable internet connection and a backup plan (online exams)
Use a wired or reliable connection, test it the day before, and know how to reconnect if the session drops. Keep a phone (silenced) nearby only if the proctor rules allow it for technical support. Confirm the provider's reconnect policy.
Compatible computer and browser (online exams)
Run the provider's system check in advance: supported browser version, webcam, microphone, and any required secure-browser plug-in. Close all other applications before launching the exam.
Quiet, well-lit, private room
For remote proctoring, the room must be free of other people, notes, and screens. A desk lamp or good lighting helps the proctor verify your identity and see the workspace during the room scan.
Clear desk and permitted materials only
Remove books, notes, phones, smart watches, and secondary screens unless the provider explicitly permits them. ISO/IEC 27701 Foundation is normally a closed-book exam; confirm permitted items with the provider.
Water and any permitted comfort items
Check the provider's rules on drinks, medication, and tissues. If you need medication or an accommodation, arrange approval with the provider well before exam day.
Arrival/check-in time buffer
Plan to be ready 15–30 minutes before your slot to complete ID verification and the room scan. Late arrivals may be refused entry or have time deducted; confirm the provider's cut-off.
A one-page personal summary of key concepts
Use it only for last-minute revision before check-in, then put it away. Focus on the structure of ISO/IEC 27701 (scope, PIMS-specific requirements and guidance, Annexes A–F), the relationship to ISO/IEC 27001 and 27002, and the roles of PII controller vs PII processor.
Notepad or whiteboard policy confirmed
Some providers allow an erasable whiteboard or on-screen notepad during the exam; others forbid all writing. Confirm with the provider and do not bring paper unless explicitly allowed.
needs_review: Backup contact for the exam provider
Have the provider's support phone number or chat link ready in case of technical failure. The exact support channel depends on the certification body; confirm with the provider.
Plan the day
Re-read your own summary of the standard's architecture: the main body clauses for PII controllers and PII processors, and the mapping annexes that link ISO/IEC 27701 controls to ISO/IEC 27001/27002. Do a timed practice set under exam conditions, then review only your wrong answers. Stop learning brand-new topics after this point.
Run the technical system check for online delivery (browser, webcam, microphone, bandwidth). Confirm the appointment time in your local time zone, the test centre address if applicable, and the provider's ID and materials rules. Prepare your ID and login details in one place.
Light revision only: key definitions (PII, PII principal, PII controller, PII processor), the purpose of a PIMS, and the structure of the privacy-specific controls. Pack or lay out ID, confirmation, water, and any approved items. Check travel time or set up your exam room. Aim for a normal night's sleep; avoid cramming new material.
Eat normally, avoid heavy caffeine if it makes you anxious, and do a 20–30 minute review of your one-page summary. Log in or arrive early, complete ID verification and the room scan calmly, and keep your desk clear. Silence phones and close other applications.
Read each question fully and watch for qualifiers such as 'primary', 'most appropriate', or 'not'. Answer the straightforward questions first, flag uncertain ones, and return to them if the platform allows review. Eliminate clearly wrong options before choosing. If a question seems ambiguous, choose the answer most consistent with the standard's stated requirements rather than personal practice. Keep an eye on the clock and reserve time to review flagged items.
Note any technical issues for the provider's support channel, and confirm how and when results will be issued. If a provisional score is shown, save or screenshot it according to the provider's rules.
Rules to check
Identification: present the original government-issued photo ID whose name matches your registration. The name on the ID must match the booking; contact the provider before exam day if it does not. Confirm accepted ID types with the provider.
Closed book: notes, textbooks, phones, smart watches, and other devices are normally prohibited unless the provider explicitly allows them. Unauthorized materials can lead to invalidation of your result.
Remote proctoring conduct: stay in camera view, do not leave the room without permission, and follow the proctor's instructions during the room scan. Repeated look-away or off-camera behaviour may be flagged. Confirm the specific room and behaviour rules with the provider.
Breaks: scheduled breaks, if any, are defined by the provider. Unless a break is explicitly permitted, leaving the testing environment may end your session. Confirm the break policy before you start.
Scoring: the pass mark, question count, and whether scoring is scaled are set by the certification body and are not universal. Check the current candidate handbook rather than relying on second-hand reports.
Time management: the timer usually runs continuously once the exam starts, including time spent reading instructions. Plan your pace per question and leave time to review flagged items.
Technical failure: if the platform fails, follow the provider's support process and record what happened (time, error message). Do not attempt to restart repeatedly without guidance; the provider decides whether a retake is granted.
Academic integrity: do not share, record, or reproduce exam questions. Attempting to capture content or use unauthorized assistance can result in disqualification and a ban, per the provider's terms.