1.4 The PECB Exam Blueprint, BC Principles & Certification Path

Most candidates fail the PECB ISO 22301 Lead Implementer exam not because they misunderstand business continuity, but because they study the standard without studying the exam. ISO 22301:2019 is roughly 20 pages of requirements; the exam is a weighted instrument that asks 80 specific questions in a specific cognitive register. Knowing where the marks actually sit tells you where to spend your revision hours.

This section is your map. Everything below is drawn from the PECB ISO 22301 Lead Implementer Candidate Handbook, Version 5.3, and the official PECB course brochure — the two documents PECB publishes about its own exam.

---

1. The Seven Competency Domains (with real question counts)

The Candidate Handbook publishes the exact number of questions per domain. This is unusually generous disclosure — most certification bodies publish only percentages — and you should exploit it.

Three planning consequences follow immediately:

• Domains 3 and 4 are the exam. Thirty-six of eighty questions — 45% — come from planning and implementing the BCMS. Chapters 2 through 9 of this guide exist to serve those 36 questions.
• The back half is not optional. Domains 5, 6, and 7 total 29 questions (36.25%). Candidates habitually run out of study time before reaching monitoring, continual improvement, and certification audit content, and then lose more marks there than in the BIA material they over-prepared. Chapters 10 through 12 of this guide are weighted accordingly.
• Domain 2 and Domain 7 are the cheapest marks. Seven questions each, drawn from a small and highly stable body of fact (the clause structure of the standard; the two-stage audit process). These are the domains where a few focused hours convert most reliably into points.

A naming trap worth knowing

PECB publishes the domain list in two different wordings, and candidates who cross-reference sources get confused. The Candidate Handbook (the authoritative exam document) uses the seven names in the table above. The public certification webpage and the course brochure use a variant list in which "Initiation of a BCMS implementation" appears as Domain 2 and "Evaluation of the performance of a BCMS" appears as Domain 5.

These are the same exam described at different levels of granularity — not two different blueprints, and not evidence that the exam changed. When they conflict, the Candidate Handbook governs, because it is the document that carries the question counts and the knowledge statements. But note what the variant list tells you: initiation of the implementation project is examinable material in its own right (covered in Section 4.4 of this guide), even though the Handbook folds it into Domain 3.

---

2. The Cognitive Split: Half the Exam Is Judgement

The Handbook publishes a second table that matters as much as the domain weights:

"Evaluation" is the top of the taxonomy: you are asked to justify a stand or a decision, not to recall a definition. In practice an evaluation-level item gives you a scenario in which several answers are defensible and asks which is most appropriate, first, or best justified under ISO 22301.

This is why rote memorisation of clause numbers under-performs. A candidate who can recite Clause 8.2.2 but cannot decide whether an organization with an eight-hour MTPD should accept a proposed twelve-hour RTO will lose the Domain 4, 5, and 6 questions — 40 marks, exactly the number needed to fail.

Question mechanics

• Three options per question. Each item has one correct keyed response and two distractors. This is materially different from the four-option format used in most practice material — including the practice questions in this guide, which use four options deliberately to force finer discrimination during study.
• Stand-alone and scenario-based items. Stand-alone questions are self-contained. Scenario-based questions present a narrative and then ask five questions about it, so a single misread scenario can cost five marks. Read the scenario twice before answering any of its five items.

---

3. Logistics You Are Responsible For

Open book is a trap, not a safety net. Three hours for 80 evaluation-weighted questions is 2 minutes 15 seconds per question. Candidates who plan to look things up fail on time. Tab and index your copy of ISO 22301 before the exam so that lookups take seconds, and treat the standard as a confirmation tool for the two or three items you are genuinely unsure about — not as a substitute for knowing the clause structure cold.

---

4. The "Four Business Continuity Principles" — What PECB Actually Publishes

Domain 1 of the Candidate Handbook lists, as knowledge statement 4, "Knowledge of the four business continuity principles." Candidates reasonably want that list.

PECB does not publish the enumerated four principles in any public document — not in the Candidate Handbook, not in the course brochure, and not on the certification webpage. The list is delivered inside the licensed training course material. This guide will not invent one, and you should be sceptical of any free resource that presents a confident four-item list as "the" PECB principles: the versions circulating online disagree with each other, which is exactly what fabrication looks like.

What you can rely on, because it is published in the standards themselves:

• The four phases of the Plan-Do-Check-Act cycle, which ISO 22301:2019 explicitly adopts as its improvement model and which maps cleanly onto Clauses 4-7 (Plan), 8 (Do), 9 (Check), and 10 (Act). This is the four-part framing most likely to be behind an exam item, and it is covered in Section 1.3.
• The principles set out in ISO 22313:2020, the guidance companion to ISO 22301, which explains the intent behind each requirement.
• The primacy of life safety, which overrides every commercial recovery priority in any incident scenario (Section 8.1).
• The requirement that continuity capability be proven, not asserted — the exercising and testing obligation in Clause 8.5 (Chapter 9).

If you attend the official course, capture the four principles verbatim from the courseware. If you are self-studying, answer principle-flavoured questions from PDCA and ISO 22313 and do not lose sleep: the knowledge statement is one item within an eight-question domain.

---

5. The Credential Ladder: Passing ≠ Certified

Passing the exam and holding the credential are two different events. All four credentials require at least secondary education, the ISO 22301 Lead Implementer exam (or equivalent), and signing the PECB Code of Ethics. They differ only in experience:

So a candidate with no BCM background who passes the exam is certified as a Provisional Implementer and upgrades later as experience accrues. Certification is valid for three years and carries an Annual Maintenance Fee.

PECB also specifies what counts as valid project experience. The hours must involve:

1. Drafting BCMS implementation plans
2. Initiating BCMS implementation projects
3. Establishing policies, processes, and procedures
4. Setting objectives at relevant levels
5. Implementing the BCMS
6. Managing, monitoring, and maintaining the BCMS
7. Identifying and acting upon continual improvement opportunities

Keep a contemporaneous log against these seven categories while you implement. Reconstructing 300 hours from memory two years later is the most common reason applications stall.

---

6. PECB Exam Warning Traps & Implementation Pitfalls

[!WARNING] Trap 1 (Question count vs. practice-bank size): The real exam is 80 questions. Any figure you see for the number of available practice questions describes a practice bank, not the exam.

[!WARNING] Trap 2 (Option count): The live exam gives three options per question. If you have trained exclusively on four-option items, the real exam will feel easier per item and harder on time — recalibrate your pacing, not your confidence.

[!WARNING] Trap 3 ("Open book" means prepared, not unprepared): The permitted materials list does not include electronic devices, and 2 minutes 15 seconds per question does not permit browsing. Index the standard beforehand.

[!WARNING] Trap 4 (Provisional vs. Lead): Exam questions about the credential scheme frequently hinge on the fact that the exam alone never confers the Lead Implementer credential. Experience and project hours are mandatory and are verified against professional references.

[!WARNING] Trap 5 (Retake timing): The wait is 15 days from the initial exam date, and there is no limit on attempts. The commonly repeated "you get two attempts" is a description of what the training course fee covers, not a policy limit.