- What "IC" Means on This Site
- Isograd, Tosa, and CyberCitizen: Untangling the Names
- What the Credential Actually Measures
- The Four Exam Domains in Plain Language
- Format: 35 Adaptive Questions in 60 Minutes
- What the 1-1000 Score Bands Mean
- Buying and Booking: Packages and Delivery
- Validity and Retakes: Read the Fine Print
- Who Benefits From the Credential
- A Domain-Ordered Preparation Plan
- Frequently Asked Questions
- Here, IC means Isograd CyberCitizen, a cybersecurity-awareness credential, and nothing else.
- The exam has 35 adaptive questions, a 60-minute limit, and is available in English and French.
- Scores run 1-1000; 351 earns the diploma, and 551 or higher also qualifies for a Credly badge.
- Four official domains are published, with no percentage weights, so prepare evenly across all four.
What "IC" Means on This Site
The letters "IC" are used by many unrelated credentials, products, and organizations. On this site, IC means exactly one thing: Isograd CyberCitizen, a certification that tests practical cybersecurity awareness for everyday digital users. If you arrived here looking for a different credential that happens to share the abbreviation, the details below will not apply to it, including the exam format, fees, scoring, and domains.
Isograd CyberCitizen is aimed at people who use computers, phones, email, and online accounts at work or at home and want a recognized way to show they handle those tools safely. It is not a deep technical security-engineering certification. It is about habits, judgment, and foundational understanding: recognizing risky situations, protecting accounts and devices, and behaving securely online.
For a broader orientation, the companion articles What Is IC? and What Does IC Stand For? cover the same ground from different angles, and IC Certification gives an overview of the credential itself.
Isograd, Tosa, and CyberCitizen: Untangling the Names
A common source of confusion is that the credential travels under more than one name. The governing and administering body is Isograd/Tosa. The current public certification brand is Tosa CyberCitizen, while "IC" is the identifier used on this site for Isograd CyberCitizen. When you browse the official pages, you will mostly see the Tosa name, and that is expected.
| Name you may see | What it refers to |
|---|---|
| Isograd CyberCitizen (IC) | The site identifier used throughout these articles |
| Tosa CyberCitizen | The current public certification brand on official pages |
| Isograd/Tosa | The body that governs and administers the exam |
| CyberCitizen Exam Blueprint | The 24-page official PDF listing the four exam domains |
What the Credential Actually Measures
The certification measures whether a candidate can apply cybersecurity awareness in realistic digital situations. Instead of asking you to recite acronyms from memory, the exam mixes multiple-choice, interactive, and in-application questions. That means some items put you in a simulated working context where you must choose or perform the safe action, not simply identify a definition.
Because the audience is general digital users rather than security specialists, the content favors judgment: spotting a suspicious message, choosing a safer way to share files, deciding how to configure an account, or recognizing risky behavior on a shared device. If you want a sense of how demanding that is in practice, see How Hard Is the IC Exam? for a difficulty discussion.
The Four Exam Domains in Plain Language
The blueprint lists four domains. No percentage weights are published for them, so you cannot safely assume one area counts for more than another. The exact headings follow. For a deeper walkthrough of each, read IC Exam Domains: Complete Guide to All 4 Content Areas.
Domain 1: Understanding the Cybersecurity Ecosystem
This domain builds the vocabulary and mental map for everything else. Candidates should understand who and what is involved in digital security and why protection matters to individuals and organizations.
- Core terminology and the basic landscape of digital risk
- Why attackers target ordinary users, not just large organizations
- How individual behavior fits into an organization's overall security
Domain 2: Securing Data, Accounts, and Digital Devices
This is the hands-on protection domain. Note the comma after "Accounts" in the official heading; it is part of the exact title. Expect practical items about safeguarding what you own and use every day.
- Protecting personal and professional data
- Keeping accounts secure through sound authentication habits
- Maintaining the safety of computers, phones, and other devices
Domain 3: Adopting Secure Digital Practices
Where Domain 2 is about what you protect, this domain is about how you behave. It rewards consistent, careful routines in everyday online activity.
- Safe habits when browsing, communicating, and sharing information
- Secure approaches to working with colleagues and online services
- Turning awareness into repeatable day-to-day behavior
Domain 4: Protecting Against Cyber Threats and Digital Risks
This domain focuses on recognizing and responding to threats. Candidates should be able to identify warning signs and choose a sensible response.
- Recognizing common threat patterns and deceptive tactics
- Understanding the risks tied to everyday digital activity
- Knowing how to react when something looks wrong
Format: 35 Adaptive Questions in 60 Minutes
The certification exam consists of 35 adaptive questions with a 60-minute limit. "Adaptive" means the platform adjusts as you answer, which is consistent with scoring built on item response theory. Question types include multiple-choice, interactive, and in-application items, and the exam is offered in English and French.
The testing conditions are strict. The exam is closed book and proctored throughout, with no breaks and no outside materials. Remote delivery requires a computer, webcam, microphone, and internet connection. Valid photo identification is required.
What the 1-1000 Score Bands Mean
Results are reported on a 1-1000 proficiency scale using item response theory. These are scaled proficiency bands, not percentages correct, so a score of 551 does not mean you answered 551 out of 1000 of anything. Each band carries a different outcome:
| Level | Score range | Outcome |
|---|---|---|
| Beginner | 1-350 | Certificate of completion |
| Basic | 351-550 | Certification diploma |
| Productive | 551-725 | Diploma plus Credly digital badge |
| Advanced | 726-875 | Diploma plus Credly digital badge |
| Expert | 876-1000 | Diploma plus Credly digital badge |
The practical dividing lines are 351 (the point where the certification diploma begins) and 551 (the point where the Credly digital badge becomes available). For a focused look at these thresholds, see IC Passing Score: Exactly What You Need to Pass. No official candidate pass rate was verified, so be wary of any site quoting a precise figure; the article IC Pass Rate: What the Data Shows explains what can and cannot be said.
Key Takeaway
Decide your goal before you book. If a diploma is enough, aim above 350; if you want a shareable Credly badge for your profile, plan your preparation to clear 550.
Buying and Booking: Packages and Delivery
Testing runs on the Tosa/Isograd platform through approved Tosa centers or remote proctoring, including Integrity Advocate. In the U.S., English-language CyberCitizen is supported at Prometric centers. The U.S. public store lists several packages, and what you receive depends on the product you select:
| Package | U.S. price | What it includes |
|---|---|---|
| Certification Ready | USD 109 | One exam and proctoring |
| Certification Prep | USD 125 | Adds one practice assessment |
| Certification Prep Plus | USD 135 | Includes two practice assessments |
| Skill Builder (English) | USD 225 | Course, one practice assessment, exam, and proctoring |
| Skill Builder Plus (English) | USD 235 | Course, two practice assessments, exam, and proctoring |
The price gap between Certification Ready and the Prep tiers is small, which makes the practice-assessment options worth a look if you want a realistic rehearsal before the real thing. For a fuller breakdown, see IC Certification Cost: Complete Pricing Breakdown, and for timing questions see IC Exam Dates: Testing Windows, Deadlines & Scheduling. Prices and inclusions can change, so confirm them in the official store at purchase.
Validity and Retakes: Read the Fine Print
This is the area where the published sources do not fully agree, so it deserves care. The CyberCitizen blueprint and the directly retrieved U.S. credential page specify three-year validity and retesting for renewal or score improvement, with a minimum 24-hour interval between retakes.
However, the general Tosa FAQ describes a different, generic policy: lifetime certification with scores becoming outdated after three years, no minimum retake waiting period, and a 551 minimum for other certifications including digital literacy. These statements conflict with the CyberCitizen-specific terms.
Who Benefits From the Credential
Because no formal education, experience, training, or age prerequisite is specified, the certification is open to a wide audience. The only firm requirement is valid photo identification. See IC Requirements: Eligibility, Prerequisites & How to Qualify for the full picture.
The people who tend to gain the most are those whose daily work touches email, shared files, and online accounts without being security specialists: administrative staff, students entering the workforce, employees in regulated or data-sensitive settings, and anyone whose employer wants a baseline of security awareness. For job-market context, IC Jobs discusses where the credential shows up, while IC Salary Guide and Is the IC Certification Worth It? help you weigh the value. Treat it as a foundational, awareness-level signal that complements other skills rather than as a substitute for technical security training.
A Domain-Ordered Preparation Plan
Preparation time is separate from exam time. The credential page recommends around 150 hours of training and practice for a Productive result or higher, while the public CyberCitizen Learning Lab course estimates 25-40 hours. These are recommendations, not admission requirements, and the right amount depends on how much you already do securely by habit.
Because the domains are unweighted, spread effort evenly and order the work so each domain builds on the last:
Domain 1: Ecosystem foundations
- Learn the vocabulary first; every later domain assumes it
- Map who is involved in digital security and why ordinary users are targeted
Domain 2: Data, accounts, and devices
- Practice the hands-on protection steps, since interactive items test actions
- Review account and device safeguards in realistic scenarios
Domain 3: Secure digital practices
- Turn knowledge into routines you can recognize in scenario questions
- Work through everyday sharing, browsing, and communication situations
Domain 4: Threats and risks, then full review
- Drill threat recognition and appropriate responses
- Take a timed practice run under 60-minute conditions
For a fuller approach, see IC Study Guide: How to Pass on Your First Attempt, the quick-reference IC Cheat Sheet, and the overview at IC Training. When you are ready to test yourself, the IC practice test site offers timed practice questions, and you can return to the main practice tests as you tighten up weak domains. Since the real exam is closed book and adaptive, practicing under timed, no-notes conditions is more useful than rereading material passively.
Frequently Asked Questions
On this site, IC means Isograd CyberCitizen, a cybersecurity-awareness certification administered by Isograd/Tosa. The current public brand is Tosa CyberCitizen, and IC is the identifier used here. It should not be confused with other credentials that share the same letters.
The certification exam has 35 adaptive questions with a 60-minute limit. Question types include multiple-choice, interactive, and in-application items, and the exam is available in English and French. A separate assessment of 25 questions and 40 minutes exists but is distinct from the certification exam.
Scores use a 1-1000 scaled proficiency scale. A score of 351 or higher earns the certification diploma, while 551 or higher also qualifies for a Credly digital badge. Scores of 1-350 earn a certificate of completion. These are proficiency bands, not percentages correct.