What Is IC?

What "IC" Means Here: Isograd CyberCitizen

On this site, IC stands for Isograd CyberCitizen. It is a certification that measures practical cybersecurity awareness for everyday digital work: recognizing threats, protecting accounts and devices, and handling data responsibly. It is aimed at people who use computers and online services as part of their job or daily life, not at security engineers.

Because "IC" is a common acronym, it is worth being explicit. Everything on this page concerns the Isograd CyberCitizen exam and nothing else. If you are comparing this credential with something you saw under the same two letters elsewhere, treat them as unrelated until you verify the certifying body. For other angles on the name itself, see our short explainers on what IC stands for and IC meaning.

Who Runs the Credential and How It Is Branded

The governing and administering body is Isograd, operating through its Tosa certification brand. The current public name of the credential is Tosa CyberCitizen, while "IC" is the identifier used on this site. If you search the official channels, look for Tosa CyberCitizen rather than "IC."

The authoritative description of what is tested is the Tosa CyberCitizen Exam Blueprint, a 24-page document published by Tosa. It is visibly undated, and the file metadata does not establish a formal exam-version label, so the practical rule is simple: the current linked blueprint controls over any older indexed framework you may find online. Domain names in this article follow that current blueprint.

Exam Format at a Glance

The certification exam is short and adaptive. Here is the verified structure:

Adaptive means the questions you see respond to how you are performing, so two candidates do not necessarily face the same sequence. In-application and interactive items ask you to do something rather than simply recognize a correct statement, so familiarity with how real settings and interfaces behave matters more than memorizing definitions.

The current Tosa brochure also describes a separate assessment of 25 questions and 40 minutes. This is distinct from the 35-question, 60-minute certification exam, and the brochure does not establish that it is a recruitment test. Do not mix up the two when planning your time.

The Four Official Domains

The blueprint organizes the exam into four domains. No percentage weights are published, so there is no official basis for claiming one domain counts for more than another. The honest approach is to prepare all four. For a deeper walkthrough, see our complete guide to the four IC content areas.

How Scoring Works: Bands, Not Percentages

CyberCitizen scores use item response theory on a 1-1000 proficiency scale. That means your result reflects estimated proficiency based on the difficulty of the questions you handled, not the share of questions you answered correctly. A score of 551 is not "55.1% right."

The distinction to remember is 351 for the diploma and 551 for the digital badge. If you plan to show the credential on a professional profile, the badge threshold at Productive or higher is the practical target. Our page on the IC passing score goes further into how to interpret these bands, and no official candidate pass rate was verified, which is why the IC pass rate discussion stays qualitative.

Eligibility, Identification, and Testing Conditions

No formal education, experience, training, or age prerequisite is specified. Anyone can register. What you do need is valid photo identification. For a fuller treatment, read our guide to IC requirements and eligibility.

Testing takes place on the Tosa/Isograd platform, either at an approved Tosa center or through remote proctoring, which includes Integrity Advocate. In the United States, the English-language exam is offered at Prometric centers through the store. The conditions are strict:

• The exam is closed book and proctored from start to finish.
• No breaks and no outside materials are permitted.
• Remote delivery requires a computer, a webcam, a microphone, and an internet connection.

Registration Options and U.S. Pricing

The U.S. public store lists several bundles. Package inclusions follow the product you select, so read the description at checkout.

The cheapest route is the exam-only bundle, while the higher tiers add structured practice and a course. If you want a deeper comparison of what each tier is worth, our IC certification cost breakdown lays out the trade-offs. Prices can change, so confirm them on the official store before purchasing.

Validity, Retakes, and a Policy Conflict

This is the area where sources disagree, so read it carefully.

• The exact CyberCitizen blueprint and the directly retrieved U.S. credential page specify three-year validity, with retesting available for renewal or score improvement. That U.S. page also specifies a minimum 24-hour interval between retakes.
• The generic Tosa FAQ describes lifetime certification in which scores simply become outdated after three years, no minimum retake waiting period, and a 551 minimum for other certifications such as digital literacy.

These two descriptions do not match. The CyberCitizen-specific material, including the 351 diploma and 551 badge distinction, is the safer guide for this credential, but you should verify the validity and retake terms that apply to the specific channel where you book. If you are planning around renewal or a quick retest after a disappointing score, check this before you pay. Scheduling details are covered in our IC exam dates guide.

Who Benefits From It

CyberCitizen targets general digital users rather than security specialists, so the people who gain most are those who need to demonstrate baseline security awareness:

• Employees in office and administrative roles whose daily work involves email, shared files, and cloud accounts.
• Students and early-career candidates who want a verifiable credential showing responsible digital habits.
• Organizations and training programs that want a consistent way to measure staff awareness.
• Career changers building a foundation before deciding whether to pursue deeper technical security study.

Be realistic about what it signals. It is an awareness-level credential, so it supports a profile alongside other skills rather than substituting for technical security qualifications. For a sober look at career value, see our ROI analysis, and for how it connects to employment, our pages on IC jobs and the IC salary guide. We avoid quoting salary figures here because none are verified for this credential specifically.

Preparation Time and a Domain-Based Plan

Two separate time figures are published, and they are preparation guidance rather than admission requirements:

• The credential page recommends around 150 hours of training and practice for a Productive result or higher.
• The public CyberCitizen Learning Lab course estimates 25-40 hours.

The course curriculum does not replace the four formal exam domains and does not establish exhaustive exam coverage, so use it as a supplement rather than a guarantee. Because the exam includes in-application questions, hands-on familiarity is as important as reading. Here is one way to sequence the four domains over a few weeks:

For a fuller plan, see our IC study guide and the one-page cheat sheet. You can also try questions on our practice test site to get a feel for the format and pacing. If you want a sense of difficulty first, read how hard the IC exam is.

Frequently Asked Questions

If you are still deciding whether to pursue it, our overview of what the IC certification involves and the IC training options are good next stops.