ISC2 CC Results and Retake Rules

What happens immediately after the exam

After a CC exam sitting, many candidates receive a provisional result at the test center. ISC2 later sends an email after receiving the result from Pearson; its FAQ says this delivery can take up to 72 business hours. Keep the appointment confirmation and check the email address associated with the ISC2 exam account. If the expected message does not arrive after that period, contact ISC2 Exam Administration rather than booking a duplicate test.

A provisional pass is an important outcome, but it is not the complete CC award. Passing candidates still need to complete the certification application, agree to the ISC2 Code of Ethics and pay the initial Annual Maintenance Fee. A failed result has a different next step: use the domain proficiency feedback to plan study, then respect the retake waiting rule before selecting another appointment.

Passing: the application deadline

ISC2 says a candidate has nine months from passing the exam to submit the CC application. The application includes agreement to the Code of Ethics. After submitting it, the candidate pays the initial US $50 AMF through the ISC2 dashboard. Once those steps are complete, ISC2 finalizes the credential and makes the digital certificate and badge available. CC does not require the work-experience endorsement used by some other ISC2 certifications.

Do not leave the application until the deadline week. Save the pass notice, check that your account details are correct and complete the form while the result is fresh. If the application is not submitted within nine months, ISC2 says the candidate must retake the exam. That is avoidable: add a reminder shortly after the appointment and another well before the deadline.

1. Keep the provisional result and appointment confirmation.
2. Watch the email address linked to the ISC2 account for official result communication.
3. After a pass, complete the application and Code of Ethics agreement within nine months.
4. Pay the first US $50 AMF as instructed in the account.
5. Verify the certification status, anniversary and digital badge after processing.

Failing: use domain feedback carefully

ISC2 does not provide a detailed raw score report. A candidate who fails can receive proficiency feedback by exam domain. The feedback indicates broad areas to revisit, not an item-by-item answer key or exact percentage correct. Combine it with your own practice log: note whether misses came from a vocabulary gap, confusing related terms, missing a qualifier or choosing an action that belongs to a later incident phase.

For example, weaker feedback in Identity and Access Management Concepts suggests reviewing identification, authentication, authorization, accounting, least privilege and separation of duties. It does not prove that every IAM item was wrong. Work through new scenarios, such as a valid user who can access records outside their role, and explain why the issue is authorization. This produces a specific learning goal without inventing a raw score.

A candidate should also compare study materials with the current September 1, 2026 outline. An old question set may misrepresent domain names or weights. Before retaking, cover the active five-domain structure and not only the remembered topics from the previous attempt.

Retake waiting periods and annual limit

ISC2 has two retake limits. After the first attempt, a candidate must wait 30 test-free days before trying again. After a second attempt, the wait is 60 days from the latest exam. After the third attempt and later attempts, the interval is 90 days. Candidates may take an ISC2 exam up to four times in a 12-month period for that certification program. These are waiting minimums, not recommended study durations.

A candidate who fails on the first attempt could theoretically register for the next eligible date after 30 test-free days, but must also find a seat and have a valid exam entitlement. If the product includes two attempts with a 180-day validity window, use the account and package terms to check that both the waiting period and appointment fit before expiration.

Cost of another attempt

A separate retake generally requires another paid exam registration at the current regional price. The standard CC price is US $199 in the Americas and Asia Pacific regions shown in ISC2’s table; other regions may be priced in local currencies, with taxes based on the exam location. A Peace of Mind product includes a second attempt in its purchase price, subject to the product’s time and retake terms. Existing pledge participants only had one free attempt; a failed attempt was not a free second sitting.

The first AMF is due after passing and completing the application, not after a failed attempt. A candidate who is considering a retake should budget for exam costs separately from maintenance. If the goal is a current certification, the AMF and CPE obligations begin once the credential is awarded.

Retake planning example

Imagine a candidate fails on October 10 after using a standard exam-only code purchased in June. The next attempt cannot be earlier than 30 test-free days after the first, but the candidate should choose a date that allows focused review and a Pearson seat. If the exam code expires in June of the next year, the candidate has time, but should avoid delaying until the final month. A second failure increases the wait before a third attempt to 60 test-free days.

A candidate with a two-attempt Peace of Mind product needs a tighter plan. If the first sitting is near the end of the 180-day window, the 30-day waiting rule may make the second sitting impossible before the product deadline. Schedule the first attempt early enough to preserve the opportunity. The price of a second attempt is only useful if the time window makes it usable.

Common result misunderstandings

• Treating the test-center provisional result as the end of certification. Passing still requires the application, ethics agreement and AMF.
• Assuming a fail report gives the exact number of correct answers. ISC2 gives domain proficiency feedback, not a detailed raw score.
• Booking as soon as the waiting period ends without checking the product expiration or appointment availability.
• Assuming the One Million pledge gives a free retake. Eligible pledge participants received a single free attempt.
• Confusing a Candidate membership dues payment with a second exam fee or future annual maintenance.

Most candidates receive a provisional result at the center. ISC2 says official result email can take up to 72 business hours after Pearson transmits the record.

Nine months from passing. If you do not submit the application within that period, ISC2 says you must retake the exam.

Wait 30 days after your first attempt, 60 after your second, and 90 after the third or later attempt. The limit is four attempts in a 12-month period.

ISC2 provides domain proficiency feedback for failed candidates, not a detailed raw score or item-by-item answer list.

If your result is delayed or the account looks wrong

Start with the email address tied to your ISC2 exam registration and look in the account used to schedule the appointment. Pearson may provide a provisional result at the center, while ISC2’s official email follows after the record is transmitted. If more than 72 business hours pass without confirmation, contact Exam Administration with your candidate details and appointment date. Avoid opening a second account or booking another attempt to solve a result-delivery problem.

If the dashboard shows an exam but no certification after a pass, confirm that you submitted the application and Code of Ethics agreement and paid the first AMF. These are separate post-exam steps. Save the confirmation of each step. If your name or email differs between Pearson and ISC2, tell support exactly which account was used so the records can be matched.

Application examples

A candidate passes on October 5, 2026. The nine-month application deadline is nine months after that pass date. A calendar reminder in the first week after the result gives plenty of time to complete the form and payment. The exact status date appears through ISC2; do not treat the month of the exam as a substitute for the account deadline.

A candidate passes but postpones the application while changing jobs. The candidate should still complete it within nine months; job transition does not substitute for the form. CC does not request an employer endorsement, so changing employers should not prevent an application. The candidate must agree to the Code of Ethics and pay the AMF as required.

Plan a retake from the weak concept, not the memory of the test

After a fail result, candidates often remember a few surprising questions and over-study those topics. That is a weak study strategy because memory is selective and item content is protected. Use the broad domain feedback instead, then identify a concept gap using your own notes or practice results. If the feedback indicates a networking weakness, review segmentation, secure communication and cloud responsibility rather than searching for recalled exam questions.

If you fail a question bank repeatedly because you read too fast, practice slowing down on the final sentence and qualifiers. If you know the definitions but miss scenarios, explain a fresh example aloud before checking the answer. If a bundle has two attempts, make sure your study interval and the 30-day waiting rule fit within its 180-day term.

Retake scenarios with the annual limit

The four-attempt maximum is counted within a 12-month period for each certification program. If a candidate has used three attempts, a fourth is the last allowed within the relevant period and the wait after the third is 90 days. A candidate who has exhausted four attempts must wait until an eligible attempt falls outside the 12-month limit and follow the then-current rules. Do not plan around informal advice that conflicts with the official retake policy.

Every attempt consumes time and money, so choose the next date based on both eligibility and preparation. A first retake is not automatically a good choice on day 30. The candidate should review the domain feedback and confirm a real appointment is available before the voucher expires.

Retake calendar examples

A first-time candidate who fails on October 10 cannot sit again until completing 30 test-free days. That earliest date is only a floor: the candidate still needs a valid exam entitlement and a Pearson seat. A reasonable plan might spend the first week reviewing domain feedback, several weeks correcting concepts with new scenarios, then schedule the retake after a timed review. The right amount of study depends on the gap, not only the calendar rule.

After a second attempt, the wait becomes 60 test-free days. If the first two results show different weak areas, adjust the plan rather than repeat the same course. After the third attempt, the 90-day interval and four-attempt annual maximum make a rushed fourth sitting particularly costly. Review the official retake page and voucher terms before purchasing a new attempt.

Separate account support from exam retakes

If the problem is a missing result email, application page or payment record, contact ISC2 support and provide the exam date and account details. Do not treat every administrative delay as a failed attempt. A second purchase cannot accelerate result processing. Keep receipts or confirmation records that show a completed action, while protecting personal account information.

If the official result says fail, the retake policy applies even if a practice score looked strong. Practice performance is not an appeal. Follow the result notice, use domain feedback and register only when both the wait and product window allow it.