Exam Day Rules and Identification

Key Takeaways

  • Bring one valid, government-issued photo ID whose name exactly matches the ISACA registration.
  • Arrive at a PSI test center 30 minutes early; you forfeit the seat and fee if you miss the appointment.
  • No personal items are allowed at the workstation: no phones, notes, watches, or food/drink unless pre-approved.
  • All 150 questions count and there is no penalty for wrong answers, so never leave a question blank.
Last updated: June 2026

Exam Day Rules and Identification

The CISM is delivered through PSI (ISACA's testing partner) either at a test center or via remote online proctoring. The single most common avoidable failure is an identification mismatch: the name on your photo ID must exactly match the name you used to register with ISACA. Plan to correct any discrepancy in your ISACA account well before exam day.

Acceptable identification must be current (not expired), government-issued, and bear a photograph and signature. Examples:

Accepted IDNotes
PassportBest choice for international and online testing
Driver's licenseMust be current and match registration name
National/government ID cardMust include photo and signature
Military IDAccepted where it carries photo + signature

A student ID, photocopy, or expired document is not accepted. If your ID lacks a signature, bring a second supporting ID. Arrive 30 minutes early; checking in late can mean forfeiting both your seat and your exam fee with no refund.

Name matching is stricter than candidates expect. If you registered as "Robert Lee" but your license reads "Robert James Lee," that is usually fine because the registered name is contained in the ID. Problems arise with nicknames ("Bob" vs. "Robert"), maiden/married name changes, or transliteration differences on non-Latin documents. The fix is always the same and must happen in advance: update the name in your ISACA account so it exactly matches the ID you will present. The proctor has no authority to waive a mismatch on the spot.

Prohibited items and conduct

At the workstation you may not have phones, smartwatches, fitness bands, notes, books, bags, hats (except religious), or food and drink unless an accommodation was pre-approved by ISACA. Test centers provide secure storage; an erasable noteboard or on-screen scratch tool is supplied -- you may not bring your own paper. Leaving the room mid-exam (an unscheduled break) is permitted but the clock keeps running and you may be re-scanned on return.

Scoring model and pacing

Key rule that changes test-day strategy: there is no penalty for a wrong answer, so an unanswered question and a wrong answer score identically -- always guess rather than leave a blank. Of the 150 items, some are unscored pretest questions, but you cannot tell which, so treat every question as scored.

Pacing math for the 240-minute window:

  • 240 minutes / 150 questions = 96 seconds per question on average.
  • Target ~90 seconds; bank the remaining ~15 minutes for flagged items.
  • Flag any item over ~2 minutes, pick your best current answer, and move on. The interface lets you review and change flagged answers before you submit.
  • Do a final pass to confirm no blanks remain.

Remember the manager's lens still applies under time pressure: when two options both look right, choose the one that best assigns accountability, aligns to business risk, or addresses the FIRST/BEST/MOST appropriate qualifier in the stem.

Day-of routine and rescheduling

Small logistics decisions protect your score. Sleep matters more than a final cram; the test is four hours of dense judgment calls and fatigue degrades exactly the careful reading CISM demands. Eat beforehand, because food is not allowed at the workstation without a pre-approved accommodation, and a break to eat burns your test clock.

If life intervenes, you can reschedule or cancel an appointment, but ISACA enforces a cutoff window before the appointment -- typically you must reschedule at least 48 hours before the start time, or you forfeit the exam and its fee. Build a buffer:

  • Confirm the test-center address or online check-in link the day before.
  • Plan transit so you arrive 30 minutes early; late arrivals can be turned away.
  • Have your ID ready in hand -- name must exactly match the ISACA registration.
  • Use the restroom before check-in; an in-exam break does not pause the timer.

During the exam, do two passes. First pass: answer everything you know quickly, flag anything that costs more than two minutes, and never leave a blank since there is no wrong-answer penalty. Second pass: return to flagged items with your remaining time, re-read the qualifier, and confirm your choice reflects the manager's accountability-first reasoning rather than a tempting technical detail.

Behavior the proctor will stop

Whether in a center or online, certain behaviors draw a warning or end the session: speaking or reading questions aloud, leaving the camera frame, covering the camera, accessing notes or another device, or having a second person present. At a center, you cannot communicate with other candidates and must raise your hand for any need. Treat the entire appointment -- check-in to submission -- as monitored.

A short reference for the test-day rules that most affect candidates:

RulePractical effect
Arrive 30 minutes earlyLate arrival can forfeit seat and fee
ID name = registration nameMismatch can block admission
No personal items at the seatPhones, watches, notes, food all barred
Clock runs during breaksUnscheduled breaks cost test time
No wrong-answer penaltyAlways answer every question
Reschedule cutoff (~48 hours)Late changes forfeit the fee

Internalize these now so test day is mechanical. Your cognitive budget should go entirely to reading stems and applying the manager's lens, not to figuring out logistics you could have settled in advance.

Test Your Knowledge

A candidate's driver's license says 'Robert J. Lee' but the ISACA registration says 'Bob Lee.' What is the likely outcome at check-in?

A
B
C
D
Test Your Knowledge

With about 30 minutes left and three questions still unanswered, what is the best action given CISM scoring?

A
B
C
D