No, you cannot go back. In the CQI and IRCA ISO 27001 Lead Auditor online exam, once you have answered a question and clicked Next you cannot navigate backwards to review or change your answer — a security measure against cheating. Any technique that depends on returning to an answered question is unusable here.

What is the navigation rule in the CQI IRCA ISO 27001 online exam?

The rule that shapes everything else on this page: once you answer a question and click Next, you cannot navigate backwards to review or change it. CQI and IRCA state it in their guide for learners and give the reason — it is a security measure to reduce the risk of cheating.

It is the opposite of how most examinations behave. There is no changing your mind two questions later, when the wording of a subsequent item makes you realise what the earlier one was asking. Once an answer is submitted it is the answer.

Each question you answer is a door that shuts behind you.

Why the no-going-back rule matters in the ISO 27001 Lead Auditor exam

Almost all general exam technique assumes you can revisit. Do the easy ones first and come back. If you are stuck, answer something and move on. Leave ten minutes at the end to check your answers. That advice is sound in most examinations. Here it is actively harmful, because following it means committing an answer to a question you meant to come back and think about.

If you have been taught a flag-and-return technique for this paper — and it appears in preparation material written for these courses — unlearn it before you sit. It is an expensive habit to carry into an examination that does not allow it.

How to sit an ISO 27001 Lead Auditor exam paper you cannot go back through

The technique changes in four specific ways.

Decide before you click. Treat every Next as final, because it is. The moment of decision is now, not later.

Budget time per question rather than per paper. With no opportunity to return, the risk is not running out of time at the end — it is spending a great deal of time on a two-mark item you were never going to get right, and then rushing the ones you would have. Know roughly what each question is worth and move accordingly.

Read the whole question before you touch anything. Particularly the qualifiers: best, most, first, not, except. A misread qualifier is normally recoverable on a second pass. Here it is not.

Check the count of selections before you commit, on any question asking for more than one answer. There is no correcting it two screens later.

The general principle: this paper rewards a slower, more deliberate first pass than you are used to, because the first pass is the only pass.

What you can still do in the CQI IRCA ISO 27001 online exam

Three things are worth knowing, because the rule is narrower than the panic it causes.

You can take a break. You are permitted one break of ten minutes, and it must be taken using the on-screen button so that it is logged as an official break. Leaving the room at any other point is recorded as an absence and flagged to CQI. If you are losing focus, that button is the tool for it — not pushing on and answering badly.

Nothing hurries you through the question in front of you. The rule closes the door behind you; it does not close the one you are standing in. Re-read the current item, work through the options and eliminate before you select — within the budget you set for it, since the clock is the one thing the rule does not stop.

You can still look things up. The paper is open book, which is worth more here than in an examination you could return to. What exactly you may have with you is dealt with in the next section.

What the navigation rule means for open-book use in the ISO 27001 Lead Auditor exam

Being able to look things up matters more here than it would elsewhere, and the navigation rule is why.

In an examination you can return to, looking something up is deferrable. You answer on instinct, note the item, and come back with the standard open if time allows. Here there is no coming back, so every lookup is a decision made in the moment: is this question worth the time it will take me to find the clause?

That pushes the value of preparation in a specific direction. What matters is not having memorised the standard but knowing where things live — which clause produces which output, which Annex A theme a control sits under, where the definitions are. A reader who can turn to the right page quickly can afford to check. A reader who has to hunt cannot, and will end up guessing on items the book would have answered.

The practical preparation is therefore navigational rather than mnemonic. Work through the standard until the structure is familiar, and decide before the day which kinds of question you would look up and which you would answer from knowledge.

Now the caution, and it matters. Open book does not mean anything goes, and what may be in front of you is not a single settled list. CQI and IRCA’s guide for learners states that the exams are open book and that you can refer to your notes from your training course. Separately, the rules governing approved partners bar ISO 19011 from the examination. And some providers apply a stricter rule than CQI publishes, telling learners that course handouts and personal notes are not permitted at all.

So do not plan your preparation around materials you have merely assumed you can bring. Ask your provider, before the day, for the list of what you may have with you, and prepare on the basis of that list. The one thing safe to assume is a clean copy of ISO/IEC 27001 itself.

The rest of the CQI IRCA ISO 27001 online exam sitting

The navigation rule sits inside a wider set of arrangements worth knowing in advance, because surprises on the day cost concentration. You log into the exam platform and hold your photo identification to the webcam, so that it fits the frame and your name and photograph are legible. You then take a photograph of your face, submit both, read the navigation and timing instructions, and accept the online examination regulations. Declining those regulations means you cannot sit.

Throughout, the proctoring service records your webcam, your microphone and your screen. Afterwards it compares your identification to your face and analyses the recording for anomalies. That includes gaze patterns: continuously looking around in any direction, or looking at your wrist, is a named misconduct behaviour. It is worth setting up so that you have no reason to look anywhere but the screen.

Frequently asked questions about CQI IRCA ISO 27001 exam navigation

Where to go next: more ISO 27001 Lead Auditor exam preparation

How partial marks work covers the selection question this rule makes unforgiving, and the question types you will meet cover what you are actually clicking. The full exam guide sets out the sitting from booking to result.

3FOLD TRAINING is a CQI and IRCA Approved Training Partner, ATP number 6039853. Its ISO 27001 Lead Auditor training course is the CQI and IRCA Certified ISO/IEC 27001:2022 Lead Auditor (Information Security Management Systems) Training Course. The course identification number is 2889. Both the partner approval and the course certification are on 3FOLD TRAINING’s Approved Training Partner record, and any provider’s certified courses can be looked up in CQI and IRCA’s own directory of certified courses and approved training partners. The course page carries the schedule and what the course includes. If you would rather ask a person first, use the course enquiry form.