Skip to content
News and updates

Certification Exam Security: Permitted Materials, Conduct and Result Review

Check issuer rules for exam materials and conduct, understand why results can be reviewed, and report testing problems without disclosing questions.

C
CertGPS

Not independently reviewed

AI-assisted content. Editorial policy · Suggest a correction

Published
Updated
Read time
3 min
On this page

Certification Exam Security: Permitted Materials, Conduct and Result Review

Exam security rules continue to apply after a candidate sees a preliminary result. As of October 2026, ISC2's results page describes statistical and forensic review, while its examination agreement governs confidential exam information and conduct. Preparation should include the issuer's rules about materials and behavior, not just the subject matter in a study guide.

The examination agreement defines the obligation

Read the current agreement before accepting it. ISC2's examination agreement addresses protected exam content and conduct, while its results page says suspected irregularities can lead to review and possible cancellation of results. A score report should not be treated as permission to reproduce questions or help someone obtain an unfair advantage.

Use authorized preparation resources and original practice exercises. When a product advertises remembered live questions, the problem is not solved by calling it a study aid. Check the issuer's policy and avoid material that depends on disclosing protected exam content.

We would keep study discussions focused on public objectives and underlying knowledge. A candidate can ask for help understanding an access-control concept without reconstructing the exact question encountered in an exam. That supports learning without turning a community conversation into content disclosure.

Open book still has defined boundaries

GIAC's proctor guidance permits an armful of eligible hardcopy references, including notes and an index. It prohibits reference materials that resemble practice or exam questions and answers, and says the assessment is not open internet or open computer. Electronic files are not permitted simply because paper references are.

Build the permitted reference set from the current rules. Check what can fit in the available workspace and practise locating information without relying on an electronic search. If an item is uncertain, ask GIAC before the appointment rather than assuming all printed material qualifies.

Keep the source of each reference understandable. A personally written index can support efficient use of legitimate course material, but it does not authorize a collection of disclosed live questions. The content and purpose of the material matter alongside its physical format.

Remote testing adds environment conditions

Pearson's OnVUE requirements describe identity and room checks, recording, and restrictions on other applications and people viewing the screen. They instruct candidates to follow the proctor and the on-screen rules. Check the version relevant to the actual exam program because exceptions and allowances can differ.

Prepare the room and device before the appointment. If someone else needs the space or a work computer cannot close required software, address that before testing. An avoidable environment problem can become a testing incident even when the candidate has no intention to cheat.

For a technical disruption, use the approved support channel. Do not record the exam screen or send question content as evidence. Describe the timing and the observed problem without exposing the assessment itself.

A reviewed result needs a factual response

ISC2's results guidance distinguishes the unofficial outcome at the test center from the official result and says further evaluation can affect a result. That is a reason to avoid promising a certification start date based only on the earliest notification. Passing also remains separate from completing any further certification requirements.

If the issuer asks for information, respond through its official process and keep a copy of the correspondence. Do not speculate publicly about another candidate or assume a delay proves misconduct. A review is an issuer process with its own evidence and outcome.

This month, read the agreement, permitted-materials rules and testing instructions together. A sound preparation plan leaves you able to explain both the exam's subject and the conditions under which you are allowed to demonstrate it.

Sources