CDPSE Results and Retakes

When CDPSE results arrive

At the end of the exam, the screen displays a preliminary passing status. ISACA says the official score will be emailed and made available online within 10 working days. The online result is in MyISACA under Certifications and CPE Management. Scores are not given by telephone or fax, and candidates do not receive question-level results.

Use the official report for the final result and next steps. A passing result lets you apply for certification if you meet the experience and other requirements. A failing result includes domain-level feedback that can help focus another study cycle. The preliminary screen is useful, but it is not the full certification decision.

What a pass means

ISACA requires a scaled score of 450 or higher on a 200-to-800 scale. The number is not a percentage or raw count. Passing confirms exam performance at that sitting; it does not automatically grant CDPSE. Candidates still need three years of qualifying work experience, the application fee, a verified application, and compliance with ethics requirements.

If the experience requirement is already met, prepare the employer and supervisor details and submit the application within five years of passing. If it is not yet met, keep building qualifying experience inside the allowed time window. Do not use the designation until ISACA has approved the application.

Retake limits and waiting periods

ISACA allows four attempts in a rolling 12-month period. After an unsuccessful first attempt, the candidate must wait 30 days before attempt two. The wait before attempt three is 90 days after attempt two, and the wait before attempt four is 90 days after attempt three. Each attempt requires the full registration fee.

The limits are measured within a rolling year, so the earliest date for a later attempt depends on actual exam dates and the applicable waiting period. Passing also restricts a candidate from taking the same exam during the five-year application period, and a current certification holder cannot retake it while certified.

Use domain feedback to plan a retake

Domain results are informational. The total number of scored questions answered correctly determines the exam score; a separate domain percentage does not create its own pass threshold. Treat feedback as a direction for review, not a detailed answer key. ISACA does not provide the questions you missed.

Build a study plan from the underlying tasks. A weak Privacy Engineering area may point to gaps in identity and access management, secure development, consent tags, encryption, or PETs. A weak Data Life Cycle Management area may involve inventory, data quality, transfer, retention, or destruction. Review the specific concept and then test it in a new context so you do not memorize one explanation.

If a result shows weakness in several domains, return to the official outline and establish a balanced plan. Avoid spending all of the waiting period taking repeated quizzes. Mix targeted reading, retrieval practice, scenario analysis, and timed sets. Before rescheduling, check that the new appointment is inside the six-month eligibility period or obtain an extension if available.

Requesting a rescore

A candidate who did not pass may submit a written rescore request through ISACA support within 30 days after the official result release. The fee is US$75. PSI performs the rescore. The request must include the candidate’s name, ISACA ID, and mailing address.

A rescore is not another exam attempt and does not reveal specific questions or responses. It is a review of score processing. Consider it when there is a concrete concern about scoring, and observe the 30-day request window. If the candidate decides to retake, the waiting period and full registration fee still apply.

Example retake timelines

Suppose a candidate takes the exam on November 10 and receives a nonpassing result. The earliest second attempt is 30 days after the first attempt, subject to appointment availability and registration. If that attempt is also unsuccessful, the next required interval is 90 days from attempt two. A fourth attempt must wait 90 days after attempt three. Each new registration is separately paid.

A practical plan should include result time, focused study, the policy wait, and appointment availability. Avoid booking the next attempt at the earliest possible date automatically. If feedback shows the candidate still confuses privacy purpose with security implementation, use the waiting period to correct that reasoning and practise fresh scenarios before paying again.

Use the score report while the attempt is fresh After the preliminary status, keep the registration email and exam date available until the official report arrives. If the report does not appear within the stated period, contact ISACA with the account details rather than registering again. A missing message is an administrative question, not a failed attempt. Save the official report when it appears so the score and domain feedback are available for planning. After a pass, check the experience requirement and application window. A candidate who already has the experience can prepare the verifier and supporting dates. A candidate who does not should keep the passing result and track relevant work as it accumulates. Do not describe the designation as earned until the application is approved. After a fail, compare domain feedback with your own error log. If Privacy Engineering is a weak area, write down the task that caused difficulty, such as translating a requirement into a system control. If the issue is risk analysis, practise identifying exposure and impact before proposing treatment. Domain feedback is broad; combine it with fresh questions and do not try to infer exact missed items. Plan a retake around changed preparation The minimum waiting period does not determine the best retake date. A candidate who is allowed to test again should first decide what will change in study. Repeating familiar questions can improve a bank score without testing transfer. Use new scenarios, explain why the chosen action fits, and identify why the closest alternative is weaker. A short retake schedule can begin with the report and current outline, then spend focused sessions on one or two weak tasks. Follow those sessions with mixed timed practice. Before scheduling, check that registration is active, the wait has elapsed, and a suitable seat exists. Appointment availability and the eligibility window are separate constraints. Keep the retake fee separate from appointment changes. A new attempt requires a full registration fee. Rescheduling an existing appointment follows its own notice rules. Save confirmations and update the calendar with the date that actually appears in the provider account. The official score uses a scaled standard, so practice percentages are not a direct forecast. A candidate who sees 80 percent on a practice set should ask whether the set covers all four domains and whether the explanations reveal sound reasoning. Use repeated performance on unseen questions as evidence, not a promise of a particular official result.

Use the score report while the attempt is fresh After the preliminary status, keep the registration email and exam date available until the official report arrives. If the report does not appear within the stated period, contact ISACA with the account details rather than registering again. A missing message is an administrative question, not a failed attempt. Save the official report when it appears so the score and domain feedback are available for planning. After a pass, check the experience requirement and application window. A candidate who already has the experience can prepare the verifier and supporting dates. A candidate who does not should keep the passing result and track relevant work as it accumulates. Do not describe the designation as earned until the application is approved. After a fail, compare domain feedback with your own error log. If Privacy Engineering is a weak area, write down the task that caused difficulty, such as translating a requirement into a system control. If the issue is risk analysis, practise identifying exposure and impact before proposing treatment. Domain feedback is broad; combine it with fresh questions and do not try to infer exact missed items. Plan a retake around changed preparation The minimum waiting period does not determine the best retake date. A candidate who is allowed to test again should first decide what will change in study. Repeating familiar questions can improve a bank score without testing transfer. Use new scenarios, explain why the chosen action fits, and identify why the closest alternative is weaker. A short retake schedule can begin with the report and current outline, then spend focused sessions on one or two weak tasks. Follow those sessions with mixed timed practice. Before scheduling, check that registration is active, the wait has elapsed, and a suitable seat exists. Appointment availability and the eligibility window are separate constraints. Keep the retake fee separate from appointment changes. A new attempt requires a full registration fee. Rescheduling an existing appointment follows its own notice rules. Save confirmations and update the calendar with the date that actually appears in the provider account. The official score uses a scaled standard, so practice percentages are not a direct forecast. A candidate who sees 80 percent on a practice set should ask whether the set covers all four domains and whether the explanations reveal sound reasoning. Use repeated performance on unseen questions as evidence, not a promise of a particular official result.