ISO/IEC 38500 Lead IT Governance Manager exam-day guide
ISO/IEC 38500 Lead IT Governance Manager · Prepare for the day ahead.
Your checklist
Confirm the exam delivery format and proctoring rules with your training provider
ISO/IEC 38500 certificates are offered by several independent certification bodies, and each sets its own delivery mode (remote proctored, test centre, or paper), platform, and identity checks. Before exam day, confirm with the provider: whether it is open-book, how many questions and what the pass mark is, session length, and whether a technical pre-check of your webcam, microphone, and browser is required. Do not assume rules from a different provider apply to yours.
Government-issued photo ID matching your registration name
Remote proctoring and test centres almost always require a valid passport, national ID card, or driver's licence. The name must match the name on your booking exactly; contact the provider in advance if it does not, because name mismatches are a common cause of refused entry. Confirm with the provider which ID types it accepts.
Confirmation email or booking reference
Keep the appointment confirmation, your candidate number, and the provider's support phone number accessible. If you are sitting remotely, you may need to enter an access code or launch link at the start of the session.
Stable internet connection and a working computer (remote sittings)
Use a wired or reliable connection, close bandwidth-hungry applications, and run any system test the provider offers in the days before the exam. Have a backup plan (a phone hotspot, or the provider's support line) in case of a disconnection; most providers allow you to resume, but confirm with the provider how interruptions are handled.
Clear, quiet, well-lit room with an empty desk
Proctors typically require a 360-degree room scan, a clear desk except for permitted items, no other people, and no notes on walls. Remove phones, smart watches, and secondary screens unless the provider explicitly permits them. Confirm with the provider which materials (for example a printed standard or a second device) are allowed.
Know the syllabus domains and their weighting
Be able to state from memory the six ISO/IEC 38500 principles (responsibility, strategy, acquisition, performance, conformance, human behaviour) and the three core governance tasks of the model (evaluate, direct, monitor). Knowing the structure helps you allocate time and recognise which domain a scenario question is testing.
Revise the Evaluate-Direct-Monitor model and its application to scenarios
Most scenario questions ask what a governing body should do next. Practise mapping options onto evaluate (assess proposals and performance against business needs), direct (assign responsibility and set direction through strategy and policy), and monitor (verify conformance and performance through reporting and assurance).
Prepare concise notes on governance versus management
Be ready to distinguish the board's governance role from executive management's delivery role, and to explain how IT governance relates to enterprise governance, risk management, and assurance functions. Many distractors blur these boundaries.
Plan logistics: travel time, parking, or a quiet location for a remote sitting
Arrive or log in early per the provider's instructions. For remote exams, tell household members not to disturb you and silence devices. Confirm with the provider how early you may join and what happens if you are late.
Sleep, hydration, and a light meal before the session
A long multiple-choice exam rewards sustained concentration. Avoid last-minute cramming of new material; review your own summary sheet instead.
Check the provider's retake and rescheduling policy in advance
Rules on resits, waiting periods, and fees vary by certification body. Confirm with the provider so you know your options if you need to reschedule or retake.
Plan the day
Re-read the six principles and the Evaluate-Direct-Monitor model and write a one-page summary in your own words. Work through scenario questions on responsibility, acquisition, and conformance, and note where you confuse governance with management. Confirm your appointment time, time zone, and the provider's allowed-materials rules.
Do a timed practice set under exam conditions to calibrate your pace. Review weak domains only; do not start new topics. Run the provider's technical system check if you are sitting remotely, and test your webcam, microphone, and browser.
Light revision of your summary sheet and key definitions only. Prepare your ID, confirmation email, and any permitted materials in one place. Confirm travel or room setup. Avoid alcohol and late nights; aim for a normal night's sleep.
Eat a proper meal and hydrate. Skim your summary sheet for ten to fifteen minutes, then stop. Log in or arrive early as instructed by the provider, complete identity verification and the room scan calmly, and keep the support number within reach.
Read the instructions and note the number of questions and the time limit. Answer easy questions first and flag long scenario items to revisit. For scenario questions, identify the principle or governance task being tested, then eliminate options that describe management activity or that skip evaluation and direction. Watch for absolutes such as always and never. If the format allows review, reserve the final minutes to check flagged items and confirm no question is left blank.
Rules to check
Follow the provider's identity and verification requirements exactly; present the ID you registered with and cooperate with proctor checks, including any room scan.
Do not communicate with anyone during the exam, and keep only materials the provider explicitly permits on your desk or screen.
Do not attempt to copy, photograph, or share exam content; question banks are confidential and sharing them breaches the candidate agreement.
Confirm with the provider in advance whether breaks are allowed, how they affect the clock, and what you must do before resuming.
Understand the scoring before you start: confirm with the provider the number of questions, pass mark, and whether wrong answers are penalised, so you can decide whether to guess.
If a technical failure occurs, stop and contact the provider's support immediately rather than troubleshooting alone; follow its incident process.
Report any suspected irregularity or technical problem to the provider after the session, and keep records until results are confirmed.
Treat all exam-day policy details as provider-specific: where this guide is silent, confirm with the provider rather than assuming.