ISOC Passing Score 2026: Exactly What You Need to Pass

The Number: 650 on an 800-Point Scale

The Industrial Security Oversight Credential (ISOC) is administered by the Center for Development of Security Excellence (CDSE), part of the Defense Counterintelligence and Security Agency (DCSA), through the Security Professional Education Development (SPeD) Program. The pass standard is simple to state: a scaled score of at least 650 out of 800.

That sentence is worth reading twice, because it does not say "81 percent" or "65 percent" or any other raw percentage. The handbook defines passing as a scaled score, and candidates who treat 650/800 as a percent-correct target end up misjudging their readiness in both directions. This article explains what the threshold means, how the exam is built around it, and how to prepare for the content that actually generates your score.

If you are still confirming whether you can sit for the exam at all, start with our guide to ISOC eligibility, prerequisites and how to qualify, then come back here for the scoring details.

Why a Scaled Score Is Not a Percentage

A scaled score converts the number of questions you answer correctly into a reporting scale (here, up to 800). The conversion exists so that a given score represents the same level of performance even when different candidates see different sets of questions. Some question sets may be slightly harder or easier than others, and scaling adjusts for that.

For you, the practical consequences are:

• You cannot back-calculate a precise number of questions needed. The handbook gives the 650 threshold, not a required count of correct answers, so any website claiming "you need exactly X right" is guessing.
• Every scored question matters. With only 76 scored items, each one carries meaningful weight toward your final result.
• Your practice-test percentage is only a proxy. Use it to track trends and find weak domains, not to predict your official scaled score to the point.

Exam Anatomy: 113 Questions, 76 Scored, 100 Minutes

The ISOC assessment is a computer-based, multiple-choice exam. Here is the structure drawn from the DOW Professional Certification and Credentialing Handbook and confirmed by CDSE's Certification Tracker:

The 37 unscored questions

Roughly a third of what you see will not count toward your score, yet you will not be told which items those are. They are unscored items included for the program's own purposes, and they look exactly like the scored ones. The only sound strategy is to treat every question as if it counts. Do not burn extra time hunting for the "throwaway" items, and do not panic when a handful of questions feel unfamiliar; some of them may simply be unscored.

Pacing across 100 minutes

With 113 questions in 100 minutes, you have under 53 seconds per question on average. That is a brisk pace for scenario-flavored multiple choice. A workable approach is to answer straightforward recall items quickly, flag the longer scenario questions, and return to them after you have banked the easier points. If you want a frank read on how the format feels in practice, see our ISOC difficulty guide.

Where the Scored Points Come From

The three domain lines are the official weighted examination Areas of Expertise. They describe how the exam content is weighted, not how a preparation curriculum is allocated, so use them to prioritize where you spend study hours.

A useful way to see this: Domains 1 and 3 together account for 73% of the weighting. Ignoring Domain 2 is still risky, but nobody should walk in strong on Domain 2 and shaky on Domain 3. For a deeper walkthrough of each area, read our complete guide to all three ISOC content areas.

Passing Score in Context: What the Dated Pass Rates Show

CDSE's Certification Tracker, with statistics as of July 1, 2026, reports ISOC assessment pass rates of 32.89% for calendar year 2025 (50 of 152) and 33.33% for June 2026 (5 of 15). Those are the figures to cite, and they come with an important caveat.

What the data does tell you is that the 650 standard is not a formality. Roughly two out of three assessments in those cohorts did not reach it. That is consistent with a credential that tests applied judgment across a broad regulatory and program-management body of knowledge, and with a candidate pool that may include people sitting without much structured preparation. For a fuller breakdown, see what the ISOC pass-rate data shows.

Retake Rules That Raise the Stakes on Each Sitting

The scoring standard is only half the picture; the retake rules make each attempt count.

• 90-day wait. A failed, incomplete or missed ISOC assessment triggers a 90-day waiting period before you can try again.
• Eight-sitting limit. The handbook caps attempts at eight sittings. A "sitting" is defined as an authorization followed by either taking the appointment or missing it, so a no-show consumes a sitting just as a failed attempt does.
• 180-day authorization window. Once authorized, you have 180 days to complete the assessment.
• 24-hour rule. You can cancel or reschedule without penalty only with at least 24 hours' notice. Less than that, and a missed appointment counts against you.

Because the assessment itself is free for eligible candidates and their organizations, the real cost of a failed attempt is time: a minimum three-month delay plus one of your eight sittings. Our ISOC cost breakdown covers what is and is not charged, and the scheduling side is covered in ISOC exam dates, windows and scheduling.

Test-Day Mechanics at Pearson VUE

Pearson VUE provides secure, proctored computer-based testing for the DCSA program at testing centers. The rules that affect your focus and your result:

1. Bring two forms of ID. A mismatch or shortage of identification can end your attempt before it begins.
2. Arrive at least 30 minutes early. Check-in takes time, and the 100-minute clock is not something you want to enter rattled.
3. Expect an NDA. You must agree to a nondisclosure agreement, which means you cannot share exam content afterward.
4. No personal notes. Personal notes are prohibited, so everything you need must already be in your head.

Those restrictions are one more reason to rehearse under realistic conditions: timed, closed-note, and moving through a full-length question set. Our ISOC practice test is designed for that kind of rehearsal, and you can check the format against the numbers above.

Building a Prep Plan Around the Weights

Because the passing score is a scaled threshold across weighted domains, your schedule should mirror the weights rather than spread time evenly. This is the one place generic planning belongs in this article, and it is tied directly to the ISOC structure:

Adjust the length to your own background; someone already working in a facility security role may compress the first block, while someone new to the field should extend it. For a fuller plan, see our ISOC study guide, and keep our one-page ISOC cheat sheet handy for last-week review.

After You Pass: Maintenance Status

Passing earns you the credential, and it is worth knowing how maintenance currently works because it affects planning. Maintenance, renewal and professional development unit (PDU) tracking and reporting have been paused indefinitely since March 15, 2025. During the pause, no active credentials expire, and maintenance periods and expiration dates will reset afterward.

The underlying rule for a standalone ISOC is 75 PDUs over a two-year period, but that requirement is subject to the pause. Be careful with older or generic sources: the generic 100-PDU certification guidance, and the older October 1, 2022 maintenance PDF that groups ISOC with 100-PDU credentials, do not replace the current standalone rule. Watch CDSE's Certification Maintenance page for the official restart notice.

If you are weighing whether the effort pays off, our analyses of whether the ISOC is worth it and ISOC earnings cover the career side, and ISOC jobs looks at who values the credential.

Frequently Asked Questions