CISSP passing score: how the scaled score works

What the scaled score is

ISC2 reports its standard on a scale from 0 to 1,000, with 700 as the passing point. A scale works like quoting a height in centimetres or in feet: the person is the same height either way, only the units change. Converting to a fixed scale lets ISC2 keep one passing point across different question sets and over the years, so a pass today means the same as a pass last year.

Why there is no fixed percentage

Three reasons, and the last matters most.

1. The standard is set by people, not by a round number. A panel of subject-matter experts studies the questions and decides what a minimally competent professional should be able to do. That judgement becomes the passing standard.
2. The exam is compensatory. You do not need to pass each domain separately. Strength in a heavily weighted domain can offset weakness in another, although a large gap anywhere is a risk.
3. Everyone sees different questions. In the adaptive exam, the questions follow your performance. A percentage across two different sets of questions means very little.

Illustration: two candidates

This is a made-up example, not ISC2 data. Asha and Rohan each get roughly two in three questions right. Asha keeps answering well, so her questions drift towards the harder end of the pool. Rohan struggles early, so his drift easier. Their percentages look alike, but Asha's ability estimate sits well above the standard and Rohan's sits below it. Asha passes at 100 questions; Rohan does not. The percentage hid the one thing the exam measures.

What the score report shows

The proctor hands you an unofficial result when you check out of the test centre, and ISC2 confirms the official result by email. Nobody, pass or fail, is told how many questions they got right.

Reading the bands after a fail

• Below Proficiency: clearly short of the standard in that domain. Rebuild it from the concepts up.
• Near Proficiency: close to the line. Targeted practice and review of your errors usually moves these.
• Above Proficiency: at or above the standard. Keep these warm, but do not spend most of your time here.

The bands are coarse and a single domain can rest on few questions, so use them to re-plan, not to judge yourself. Our retake policy guide turns them into a plan.

Claims worth ignoring

• "You need 70% to pass." No. The figure of 700 is a point on a scale, not a percentage.
• "You can work out your score from the number of questions." Exams that stop at 100 include clear passes and clear fails.
• "The CISSP pass rate is X%." ISC2 does not publish a pass rate on its exam pages, so treat any figure you see with caution.

How to aim clearly above the line

Since the exam decides with 95% confidence, you want a margin, not a coin toss. Practise on adaptive tests rather than fixed quizzes, spend time in proportion to the domain weights, and train the manager's judgement that most scenario questions reward. Book once your practice results sit above the line consistently, not on one good day.

After a pass

A pass is not yet the credential. You have 9 months to complete the endorsement, in which a certified holder, or ISC2 itself, vouches for your experience. Once you are certified, you keep the credential by paying the annual maintenance fee and earning continuing education credits; see CPE and maintenance. If you passed without the full experience, you become an Associate of ISC2 while you build it.

Next steps

See where you stand with a short adaptive run in the CAT simulator. For the full approach, read how to pass the CISSP.