IC logo
Focused certification exam prep
Start practice

IC Passing Score 2026: Exactly What You Need to Pass

TL;DR
  • Isograd CyberCitizen scores run on a 1-1000 proficiency scale, not a percentage-correct system.
  • A score of 351 or higher earns the certification diploma; below that is a certificate of completion.
  • A score of 551 or higher (Productive and above) also unlocks a Credly digital badge.
  • The exam has 35 adaptive questions in 60 minutes, closed book and proctored throughout.

Why There Is No Single "Passing Percentage"

Most candidates searching for the Isograd CyberCitizen passing score expect a simple number: 70 percent, 75 percent, something they can aim for on a practice quiz. CyberCitizen does not work that way. The exam reports a scaled proficiency score between 1 and 1000, and the result you receive describes a level of mastery, not the share of questions you answered correctly.

That distinction matters for how you prepare. Answering, say, 28 of 35 questions correctly does not translate into a predictable score, because the exam is adaptive and the questions are not all worth the same amount of information about your ability. If you are still getting oriented with the credential itself, the overview in What Is IC Certification? covers the basics before you dig into scoring.

Scaled bands, not percentages: The 1-1000 figures are proficiency bands. Treat "551" as "Productive level," not as "55.1 percent correct." Any study plan built around raw-percentage targets will mislead you.

The 1-1000 Proficiency Scale and Its Five Bands

Your result lands in one of five bands. Each band describes a proficiency level, and the lowest band still produces a result, but only the second band and above earns the full certification diploma.

BandScore RangeWhat You Receive
Beginner1-350Certificate of completion
Basic351-550Certification diploma
Productive551-725Certification diploma plus Credly digital badge
Advanced726-875Certification diploma plus Credly digital badge
Expert876-1000Certification diploma plus Credly digital badge

In practical terms, 351 is the line between a certificate of completion and the certification diploma, and 551 is the line for the digital badge. Everything above 551 qualifies for the badge regardless of whether you land in Productive, Advanced, or Expert.

What Each Band Earns You

Beginner (1-350): certificate of completion

A Beginner result documents that you sat the exam, but it is not the certification diploma. If you are using CyberCitizen to satisfy an employer or training-program requirement, confirm whether a certificate of completion is sufficient or whether the diploma is expected.

Basic (351-550): the certification diploma

Crossing 351 earns you the certification diploma. For many candidates, particularly those who need proof of baseline cyber-hygiene awareness for a job or program, this is the realistic and sufficient goal.

Productive through Expert (551-1000): diploma plus Credly badge

From 551 upward you also receive a Credly digital badge, which is shareable on professional profiles and in email signatures. The three upper bands differ in the proficiency level they signal, but the badge eligibility starts at Productive. Whether the badge is worth the extra preparation is covered in Is the IC Certification Worth It? Complete ROI Analysis 2026.

Key Takeaway

Decide before you book whether you need the diploma (351+) or the badge (551+). That single decision determines how much preparation you should invest.

How Adaptive Testing and Item Response Theory Shape Your Score

CyberCitizen uses item response theory (IRT) to produce its 1-1000 scale, and the exam is adaptive. In an adaptive format, the questions you see respond to how you have been performing, so two candidates can face different question sets in the same sitting. IRT then estimates your proficiency from the pattern of your answers and the characteristics of the questions you faced.

What this means for you in practice:

  • You cannot compute your score by counting right answers. The scale is estimated, not tallied.
  • Every question counts, including early ones. Because the exam adapts as it goes, careless misses at the start can shape the difficulty of what follows.
  • There is no published number of questions you can miss. Official materials do not describe one, and you should be skeptical of any site that claims an exact miss allowance.
  • Guessing strategy is limited. You cannot reliably game an adaptive test; consistent accuracy across the four domains is the dependable route.

If you are weighing how demanding this design feels in practice, How Hard Is the IC Exam? Complete Difficulty Guide 2026 breaks down what candidates tend to find challenging.

Exam Format: 35 Questions, 60 Minutes, Three Question Types

The certification exam consists of 35 adaptive questions with a 60-minute limit. Questions come in three styles:

  • Multiple-choice questions testing knowledge and judgment.
  • Interactive questions that ask you to act on or arrange elements rather than just pick an answer.
  • In-application questions that place you in a simulated environment and ask you to perform a task.

The exam is available in English and French. Testing is closed book and proctored throughout, with no breaks and no outside materials. Remote delivery requires a computer, webcam, microphone, and internet connection.

Don't confuse the two products: The current brochure describes a separate assessment of 25 questions and 40 minutes, distinct from the certification exam's 35 questions and 60 minutes. Only the certification exam produces the 1-1000 score and the diploma tiers described here.

With 60 minutes for 35 questions, you have a little under two minutes per item on average. In-application and interactive questions typically consume more time than a straightforward multiple-choice item, so settle into a steady pace early rather than rushing the first half.

The Four Domains Behind Your Score

The current Tosa CyberCitizen blueprint defines four official exam domains. No percentage weights are published, so you should not assume any one domain is lighter than the others. Because the exam is adaptive, weak spots in any domain can pull your estimated proficiency down. For a deeper look at each area, see IC Exam Domains 2026: Complete Guide to All 4 Content Areas.

Domain 1: Understanding the Cybersecurity Ecosystem

The big-picture foundation: how threats, defenders, and everyday users fit together.

  • Recognizing who and what is involved in cybersecurity
  • Understanding why individuals are targets and how attacks reach them
  • Building the vocabulary that later questions assume

Domain 2: Securing Data, Accounts, and Digital Devices

The hands-on protective layer for what you own and log into.

  • Protecting personal and professional data
  • Managing accounts and authentication responsibly
  • Keeping devices configured and updated securely

Domain 3: Adopting Secure Digital Practices

Day-to-day habits that reduce risk when working and communicating online.

  • Safe behavior in email, browsing, and collaboration tools
  • Applying good practices in routine tasks
  • Recognizing risky situations before they become incidents

Domain 4: Protecting Against Cyber Threats and Digital Risks

Spotting and responding to specific threats and the risks they create.

  • Identifying common attack types and warning signs
  • Knowing how to react when something looks wrong
  • Understanding digital risks and how to limit exposure

Because in-application questions test whether you can do something rather than recall a definition, practice by actually performing the actions covered in Domains 2 and 3, not only reading about them. The IC Study Guide 2026: How to Pass on Your First Attempt walks through how to organize that work.

Choosing Your Target Band

Because there is no pass rate published by the certifying body, you cannot lean on "most candidates pass" as reassurance. If you want to see what is and isn't known about outcomes, IC Pass Rate 2026: What the Data Shows addresses that directly. No official candidate pass rate was verified, so set your target based on what you personally need.

Your GoalTarget ScoreWhy
Get the certification diploma351 or higherLowest score that earns the diploma rather than a certificate of completion
Add a shareable digital badge551 or higherProductive level and above qualify for the Credly badge
Demonstrate strong mastery726 or higherAdvanced and Expert bands signal a higher proficiency level

A sensible approach: aim one band above what you strictly need. If you need the diploma, prepare as though you are targeting the badge; the margin protects you against an off day.

Booking, Fees, and Package Choices

You can test through approved Tosa centers or via remote proctoring, including Integrity Advocate. In the U.S., English-language CyberCitizen is supported at Prometric centers. No formal education, experience, training, or age prerequisite is specified, though valid photo identification is required. Full eligibility detail is in IC Requirements 2026: Eligibility, Prerequisites & How to Qualify.

The U.S. public store lists these options:

PackageU.S. PriceWhat's Included
Certification ReadyUSD 109One exam and proctoring
Certification PrepUSD 125Exam, proctoring, and one practice assessment
Certification Prep PlusUSD 135Exam, proctoring, and two practice assessments
Skill Builder (English)USD 225Course, one practice assessment, exam, and proctoring
Skill Builder Plus (English)USD 235Course, two practice assessments, exam, and proctoring

Package inclusions follow the selected product. The practice assessments in the Prep tiers are the closest official preview of how your score is reported, which makes them useful if you are aiming for the 551 badge threshold. For a fuller picture of spending, see IC Certification Cost 2026: Complete Pricing Breakdown. You can also build familiarity with question styles on our IC practice test site before you commit to a paid package.

Validity and Retakes: Check the Terms That Apply to You

Here the official sources are not perfectly aligned, so verify before you book.

  • CyberCitizen-specific materials (the exact blueprint and the directly retrieved U.S. credential page) specify three-year validity and retesting for renewal or score improvement. That U.S. page specifies a minimum 24-hour interval between retakes.
  • The generic Tosa FAQ describes lifetime certification with scores becoming outdated after three years, no minimum retake waiting period, and a 551 minimum for other certifications including digital literacy.
Which terms apply to you? Do not assume the generic FAQ overrides the CyberCitizen-specific pages. The 351 diploma and 551 badge distinction is CyberCitizen's own. Confirm validity and retake terms in the booking channel you actually use before you pay.

If your first attempt lands below your goal, retesting is a legitimate route to a better band, since retesting for score improvement is explicitly described. Plan the gap between attempts around fixing identified weaknesses in specific domains, not simply repeating the same preparation.

Matching Your Prep Time to Your Target Band

Two different preparation figures appear in official materials, and they are not interchangeable. The credential page recommends around 150 hours of training and practice for Productive or higher. The public CyberCitizen Learning Lab course estimates 25-40 hours. These are recommendations, not admission requirements, and the course curriculum does not replace the four formal exam domains or establish exhaustive exam coverage.

So if you want only the diploma and already practice good digital hygiene, a lighter plan may be reasonable. If you want the badge, treat the higher figure as a signal that the badge threshold rewards deeper, more applied preparation. A simple way to sequence your time:

Week 1

Domain 1 and vocabulary

  • Learn the cybersecurity ecosystem terms the other domains rely on
  • Take stock of which areas already feel comfortable
Weeks 2-3

Domains 2 and 3, hands-on

  • Practice account, data, and device security tasks in real applications
  • Rehearse secure everyday habits, since interactive and in-application items reward doing
Week 4

Domain 4 and full review

  • Work through threat recognition and response scenarios
  • Revisit weak spots across all four domains and use a practice assessment if your package includes one

For a compact refresher in the final days, the IC Cheat Sheet 2026: One-Page Review of Must-Know Facts is a useful companion, and the main practice test lets you rehearse under timed conditions.

Frequently Asked Questions

What is the passing score for Isograd CyberCitizen?

There is no single percentage cutoff. Scores use a 1-1000 proficiency scale. A score of 351 or higher earns the certification diploma, while 1-350 earns a certificate of completion. A score of 551 or higher also qualifies for a Credly digital badge.

Is the score a percentage of questions answered correctly?

No. The bands are scaled proficiency levels derived using item response theory on an adaptive exam, so they should not be read as percentages correct. You cannot calculate your result by counting right answers.

How many questions are on the exam and how long do I have?

The certification exam has 35 adaptive questions with a 60-minute limit, using multiple-choice, interactive, and in-application formats. It is closed book and proctored, with no breaks. A separate 25-question, 40-minute assessment exists but is not the certification exam.

Can I retake the exam to improve my band?

Yes. CyberCitizen-specific materials describe retesting for renewal or score improvement, and the U.S. credential page specifies a minimum 24-hour interval between retakes. The generic Tosa FAQ describes different terms, so verify the rules in your booking channel.

Is there an official pass rate?

No official candidate pass rate was verified. Because outcomes are reported as proficiency bands rather than a simple pass or fail percentage, focus on your target band, whether 351 for the diploma or 551 for the badge, instead of chasing a published pass statistic.

Ready to pass your IC exam?

Put this into practice with free IC questions across every exam domain.