There is no single “ISO exam”. How you are assessed depends on the scheme and the provider. Ask before you book — and again on day one.
1 The main formats
| Scheme | Typical format (as published) |
|---|---|
| CQI and IRCA lead auditor | Continuous assessment through the course plus an exam. CQI and IRCA’s course table describes a 2-hour written exam; some providers now set a 1 hour 45 minute online multiple-choice exam within 30 days of the course (Batalas) or an online exam after the course (Bywater, ISO 9001) |
| CQI and IRCA conversion | Written exam of 1 hour 40 minutes |
| CQI and IRCA internal auditor | Continuous assessment and a short test (e.g. multiple choice on the final day) |
| PECB lead auditor / implementer | Exam on day 5. The ISO/IEC 27001 Lead Auditor exam is open book: 80 multiple-choice questions with three options each; pass mark 70% |
| IBITGQ (GRC Solutions) | Online exams: Foundation 60 minutes, CIS LI 90 minutes |
2 Continuous assessment
On CQI and IRCA courses, tutors assess you during role-plays and exercises — planning an audit, interviewing, recording evidence, writing nonconformities, presenting at a closing meeting. Full attendance is normally required. Take part, ask questions, and treat every exercise as assessed.
3 Scenario questions
Most questions describe a situation (“During an audit of purchasing you find…”) and ask what the auditor should do, whether it is a nonconformity, which clause applies, or which principle is involved. Learn to:
- identify the requirement (clause) before judging the evidence
- separate fact from opinion — findings need objective evidence
- spot when the scenario is about the audit process (ISO 19011) rather than the standard itself
4 Open-book exams
Open book is not easier — there is no time to look everything up. Tab or highlight your standard by clause before the exam (check the rules on what marking is allowed) and know clauses 4 to 10 well enough to find any one in seconds.
5 Written answers
For written questions (for example drafting a nonconformity statement or an audit plan), structure beats length: requirement → evidence → why it does not conform. See writing audit findings.
6 Resits
Policies vary. PECB’s course pages offer a free retake within 12 months; some UK providers include a free resit; others charge. Check before booking.