IC Requirements 2026: Eligibility, Prerequisites & How to Qualify

What "Requirements" Really Means for CyberCitizen

When people search for credential requirements, they usually expect a checklist: years of experience, a prior certification, a degree, a training course. Isograd CyberCitizen works differently. It is a cybersecurity awareness and digital-hygiene certification administered by Isograd under the Tosa brand, and the current public certification page uses the name Tosa CyberCitizen. Its "requirements" are mostly practical: confirm who you are, have a working setup, choose a booking channel, and understand the format you will face.

This guide separates what is actually mandatory from what is merely recommended. That distinction matters, because a lot of anxiety around certification exams comes from confusing preparation advice with admission rules. If you want the broader picture of the credential itself first, start with What Is IC Certification? and then return here.

No Formal Prerequisites: What That Covers

The official materials specify no formal education requirement, no work-experience requirement, no mandatory training course, and no age prerequisite. You do not need a degree, an IT job, or a prior credential to sit the exam. The one hard identity-related requirement is valid photo identification.

That openness is consistent with the credential's purpose. CyberCitizen targets everyday users of digital tools, not security engineers. The four official exam domains focus on understanding the cybersecurity ecosystem, protecting data and accounts, adopting secure habits, and recognizing threats. These are skills a student, an office employee, a job seeker, or a career changer can build without a technical background.

• Education: none specified
• Experience: none specified
• Mandatory training: none specified
• Age: no prerequisite specified
• Identification: valid photo ID required

Be cautious about one thing: "no age prerequisite specified" is not the same as an affirmative statement that every minor can book through every channel. If you are booking for a younger candidate, confirm the details with your chosen test center or the booking channel before paying.

Identity Documents and Technical Setup

Because testing is proctored throughout, identity verification is the most concrete gatekeeping step. Have your photo ID ready and make sure the name on your booking matches it. Mismatched names are an avoidable reason for delays.

Remote proctoring checklist

Candidates testing remotely use the Tosa/Isograd platform with proctoring that includes Integrity Advocate. The stated technical requirements are straightforward:

• A computer
• A webcam
• A microphone
• A working internet connection

Exam conditions are strict. The certification test is closed book and proctored from start to finish, with no breaks and no outside materials. Plan your environment accordingly: a quiet room, a cleared desk, and enough uninterrupted time. The exam itself runs 60 minutes, but allow extra time for check-in and identity verification.

Test center alternative

If you would rather not manage your own setup, approved Tosa centers offer in-person testing. In the U.S. store, English-language CyberCitizen is supported at Prometric centers. The center route removes concerns about webcam quality or home internet stability, though you trade away the convenience of testing from home.

Exam Format You Need to Qualify For

You qualify by sitting the certification exam, so the format is effectively part of the requirements. The certification exam has 35 questions and a 60-minute limit. It is adaptive, and it mixes three question styles: multiple-choice, interactive, and in-application questions. English and French are both available.

The current brochure also describes a separate assessment of 25 questions and 40 minutes. That is a different product from the certification exam, and the brochure does not establish that it serves any particular recruitment purpose. Do not assume it earns the same credential. If you are weighing the practical challenge of the real exam, How Hard Is the IC Exam? breaks down what the question styles feel like in practice.

The "in-application" style deserves attention. Rather than only asking you to recall a definition, these items place you in a simulated working context where you perform or select an action, such as adjusting a setting or responding to a realistic scenario. Candidates who have only memorized terminology can stumble here, so hands-on familiarity with how accounts, devices, and privacy settings actually behave is part of being genuinely qualified.

Score Bands: What "Qualifying" Looks Like

Scores are computed using item response theory on a 1 to 1000 proficiency scale. These are scaled proficiency bands, not percentages of questions answered correctly, so a score of 551 does not mean 55 percent right. Where you land determines what you receive.

The practical takeaway is that you can sit the exam without meeting any score threshold in advance; the score only determines which credential artifact you receive. If your goal is a shareable digital badge for a profile or CV, aim for 551 or above. For a deeper look at the scoring logic, see IC Passing Score 2026. If you are curious about outcome statistics, note that no official candidate pass rate was verified, and IC Pass Rate 2026 explains how to interpret that gap responsibly.

Booking Channels and Package Mechanics

Fee and packaging details are part of the qualification path, since you cannot sit the exam without purchasing a session. In the U.S. public store, the confirmed English-language options are:

Package inclusions follow the product you select, so read the product page before checkout. Prices can differ by region, currency, and booking channel, which is why the U.S. store figures above should not be assumed for other markets. For a fuller walkthrough of cost comparisons and what each tier is worth, see IC Certification Cost 2026.

Choosing between packages

If you already use digital tools confidently and want only the credential, Certification Ready is the lean option. If you want to see the adaptive, mixed-format style before the real attempt, a Prep tier with a practice assessment is a sensible hedge. Skill Builder tiers add the course, which suits candidates who want guided instruction rather than self-directed study. None of these purchases is a prerequisite for the others; they are convenience bundles, not gates.

Timing and scheduling specifics are covered in IC Exam Dates 2026.

Validity and Retake Rules: Check Before You Book

This is the area where published sources do not fully agree, so read it carefully rather than assuming.

• CyberCitizen-specific sources: The exact CyberCitizen blueprint and the directly retrieved U.S. credential page specify three-year validity, with retesting for renewal or score improvement. That U.S. page specifies a minimum 24-hour interval between retakes.
• Generic Tosa FAQ: This describes lifetime certification with scores becoming outdated after three years, no minimum retake waiting period, and a 551 minimum for other certifications including digital literacy.

Why this matters for requirements: if your employer or school expects a current certification, a three-year validity window affects when you need to retest. And if you are aiming for the 551 badge threshold after an initial lower score, the retake interval determines how quickly you can try again.

Readiness Benchmarks Are Not Admission Rules

Two preparation figures circulate, and they are easy to misread as requirements. They are not.

• The credential page recommends around 150 hours of training and practice for a Productive or higher result.
• The public CyberCitizen Learning Lab course estimates 25 to 40 hours.

Both are preparation recommendations, kept separate from the 60-minute exam time and from any admission condition. The gap between them reflects different goals: the course gives you a structured grounding, while the larger figure describes the effort associated with aiming for the upper proficiency bands. Importantly, the course curriculum does not replace the four formal exam domains and does not establish exhaustive exam coverage. Completing it is useful, but it is not a guarantee that every tested topic has been covered.

For a structured approach to using that time, the IC Study Guide 2026 maps preparation to the exam. For a quick last-pass review, the IC cheat sheet condenses the must-know points.

The Four Domains You Must Be Ready For

Meeting the requirements gets you into the exam; knowing the domains gets you a good score. The current blueprint lists four unweighted domains. No percentage weights are published, so you cannot rationally skip one on the assumption that it counts less. Here is what each asks of you.

For a deeper tour of what each area expects, read the full IC exam domains guide. You can also test your grasp of all four areas with realistic questions on the IC Exam Prep practice test site.

Sequencing Your Preparation by Domain

Since no domain weights are published and the exam is adaptive, an even, structured approach beats guessing which area to cram. One short schedule that fits the domain logic:

Place the hands-on domain in the middle because the interactive and in-application item types reward practice over memorization, and finish with a timed run to rehearse the 60-minute, no-break conditions.

Who Typically Qualifies and Benefits

Because there are no formal prerequisites, the audience is broad: students building a first credential, employees whose organizations want baseline security awareness, job seekers adding a verifiable digital-skills line to a CV, and career changers moving toward roles that touch data or digital tools. The credential is awareness-level rather than a specialist security qualification, so it complements rather than replaces technical certifications.

If you are considering whether the effort pays off for your situation, Is the IC Certification Worth It? weighs the return, and IC Jobs looks at where the credential tends to be relevant in hiring contexts. For earnings expectations, see the IC salary guide, which keeps its claims grounded rather than inventing figures.

Frequently Asked Questions