| At a glance | Level 1 — Practitioner | Level 2 — Professional |
|---|---|---|
| Who it's for | Newcomers to the standard, process owners and team members who need to prove they genuinely understand it | Internal auditors, consultants and quality professionals whose role is to apply the standard, not just know it |
| What it tests | Understanding of the requirements, scope, definitions and the obligations on an organisation | Everything in Level 1, plus applied reasoning across realistic workplace scenarios |
| Format | 80 questions · 120 minutes | 120 questions · 180 minutes |
| Pass · Distinction | 60% · 80% | 70% · 85% |
| The key difference | Do you know the standard? | Adds a scenario section — can you apply it, not just recall it? |
ISTO Tests of Understanding come in two levels. Both are multiple-choice, restricted-open-book, and sat online through the ISTO portal, and both include a personalised A·C·C·U·R·A·T·E Analysis report that maps your understanding across eight knowledge domains. The question is which level suits your situation.
This guide explains exactly what each level tests, how the structure and scoring differ, and how to decide.
What each level tests
Level 1 — Practitioner tests whether you understand the standard's requirements, its scope, definitions, and the obligations placed on an organisation. The three sections cover principles and definitions (including clause 4.3 scope), management system requirements (clauses 4, 5, 6, 9, and 10, except clause 4.3), and operational requirements (clauses 7 and 8). Every question is a four-option MCQ with a single best answer.
Level 2 — Professional covers the same ground as Level 1 — Practitioner, and then goes further. A fourth section introduces six scenario-based question sets. Each scenario presents five MCQs that apply the standard's requirements to realistic workplace situations. This is the key structural distinction: Level 2 — Professional does not just test whether you know the rules; it tests whether you can apply them.
Who should choose Level 1 — Practitioner
Level 1 — Practitioner suits you if you are:
- New to the standard and want a credential that proves you have genuinely understood it, not just attended a training course.
- A process owner or team member who needs to work within a certified management system and demonstrate that understanding to colleagues, auditors, or clients.
- Preparing for a broader qualification and want a solid, independently verified baseline first.
- Looking for a lower-stakes entry point before committing to the depth of Level 2 — Professional.
The 80-question, two-hour format is demanding but focused. If you have studied the standard methodically, Level 1 — Practitioner is achievable without years of implementation experience.
Who should choose Level 2 — Professional
Level 2 — Professional suits you if you are:
- An internal auditor, consultant, or quality professional whose role requires applying the standard, not just knowing it.
- Someone with hands-on implementation experience who wants a credential that reflects that applied depth.
- Already comfortable with the standard's requirements and looking for a meaningful stretch that tests real-world reasoning, not just recall.
- Seeking a more senior credential for career progression, client tenders, or regulatory expectations.
The scenario section in Level 2 — Professional is where the test separates conceptual knowledge from applied understanding. Candidates who have read the standard carefully but never implemented or audited it often find scenarios the hardest part.
How structure and scoring differ
| Level 1 — Practitioner | Level 2 — Professional | |
|---|---|---|
| Questions | 80 | 120 |
| Time allowed | 120 minutes | 180 minutes |
| Pass mark | 60% | 70% |
| Distinction | 80% | 85% |
| Sections | 3 sections | 4 sections |
| Section 1 | 20 questions — Principles, definitions, scope (clause 4.3) | 30 questions — Principles, definitions, scope (clause 4.3) |
| Section 2 | 30 questions — Management system requirements (clauses 4, 5, 6, 9, 10 except 4.3) | 30 questions — Management system requirements (clauses 4, 5, 6, 9, 10 except 4.3) |
| Section 3 | 30 questions — Operational requirements (clauses 7 and 8) | 30 questions — Operational requirements (clauses 7 and 8) |
| Section 4 | — | 30 questions — Six scenarios, five questions each (applied/practical) |
| A·C·C·U·R·A·T·E Analysis | Included for all candidates | Included for all candidates |
| Certificate on pass | Certificate of Achievement | Certificate of Achievement |
Both levels are taken online through portal.isto.ch, in the candidate's chosen language. You may keep an unmarked copy of the standard open throughout. It is the only permitted reference. Personal notes, training materials, and external websites are not allowed.
How to prepare
The A·C·C·U·R·A·T·E Analysis report you receive after the test is also a useful planning tool before it. If you have already sat one level and are considering the other, your report shows exactly which of the eight domains need more attention.
For first-time candidates, the test page on this site lists the official syllabus and test description downloads for each standard and level. These are the definitive guides to what is and is not in scope.