Every CISSP candidate knows the magic number: 700 out of 1000. But if you've been studying for this exam, you've probably discovered that this simple-sounding threshold is far more nuanced than it appears. CISSP uses Computerized Adaptive Testing (CAT), a format that fundamentally changes what "scoring" means compared to a traditional fixed-length exam. Understanding how the scoring actually works isn't just useful trivia. It changes how you should think about pacing, performance during the exam, and what to focus on in your preparation.
This article breaks down exactly how CISSP scoring works, what the 700 threshold represents in a CAT context, how ISC2 determines pass or fail, and what you can do if you don't pass on your first attempt.
Quick Answer
The CISSP passing score is 700 out of 1000 on a scaled scoring system. This is not a percentage. You cannot calculate it by dividing your correct answers by total questions. The score reflects your demonstrated competency level as measured by the CAT algorithm, weighted by question difficulty across all domains.
How CAT Scoring Works on CISSP
Traditional certification exams work simply: answer X questions, get Y% correct, pass or fail. CISSP's CAT format is fundamentally different. The exam adapts to your performance in real time. When you answer correctly, the algorithm presents a harder question. When you struggle, it presents an easier one. The goal is to efficiently determine with high statistical confidence whether your ability level is above or below the passing standard.
ISC2 uses a psychometric framework called Item Response Theory (IRT). Each question in the pool has a known difficulty parameter that's been calibrated through previous administrations. As you answer questions, the algorithm continuously updates its estimate of your ability level. The exam ends when it has reached 95% statistical confidence that your true ability is either above or below the passing threshold, and that can happen anywhere between 125 and 175 questions.
Adaptive Algorithm Starts
You begin with a medium-difficulty question. Your response updates the ability estimate in real time.
Dynamic Difficulty Adjustment
Correct answers trigger harder questions. Incorrect answers trigger easier ones. The algorithm homes in on your true level.
95% Confidence Threshold
The exam ends when the algorithm is 95% confident you're above or below 700. This takes between 125 and 175 questions.
What 700 Out of 1000 Actually Means
The 700/1000 score is not a raw score or a percentage. It is a scaled score anchored to a defined competency standard. ISC2 defines the passing standard as the minimum level of knowledge and skill required to effectively practice as an information security professional. The 700 point threshold was set through a formal standard-setting process involving experienced CISSP practitioners, not by an arbitrary decision.
Why You Can't Calculate Your Own Score
Unlike a multiple-choice exam where you can count your correct answers and divide by total questions, CISSP's scaled scoring makes that impossible. A candidate who answers 140 questions and gets 85% right might score lower than a candidate who answers 125 questions with 80% correct, if the second candidate's questions were consistently harder. The difficulty weighting is what determines the scaled score, not the raw percentage.
This is also why you don't get a detailed score report broken down by domain. ISC2 provides a simple pass/fail result for the English CAT exam. If you fail, you receive a diagnostic report indicating which domains were below proficiency, but you don't get a numerical score for each domain. This encourages candidates to study comprehensively rather than gaming specific domain cutoffs.
What Happens After the Exam Ends
Exam Completes (125-175 questions)
The CAT algorithm reaches 95% confidence. Your exam ends regardless of how many questions you've answered, as long as the minimum (125) has been reached.
Preliminary Result (Immediate)
For English CAT exams, you receive an unofficial pass/fail notification at the test center before leaving. Keep this. It's your first confirmation.
Official Result (2-3 Business Days)
ISC2 sends your official result by email within 2–3 business days. If you pass, this begins the endorsement process.
Endorsement (If Passing)
You have 9 months to have your application endorsed by an active ISC2 member who can verify your work experience. Without endorsement, the passing result expires.
CISSP Certification Issued
After ISC2 approves your endorsement, you receive your CISSP certificate and are registered in the ISC2 directory.
If You Don't Pass: Retake Policy
Not passing CISSP on your first attempt is common. ISC2 estimates the pass rate for first-time candidates is around 60 to 70 percent. The retake policy is structured to encourage genuine preparation between attempts rather than rapid re-testing.
Waiting Periods
First fail: 30-day wait. Second fail: 90-day wait. Third and subsequent fails: 180-day wait. You may attempt CISSP up to 3 times per year.
Diagnostic Report
Failed candidates receive a performance report showing which domains were below the passing threshold. Use this to target your study gaps precisely.
Retake Fees
The CISSP exam fee is $749 USD per attempt. Budget accordingly. Many candidates who fail the first time pass on the second with targeted remediation.
What to Do Differently
Analyze the diagnostic report carefully. Most retake failures happen in the same 2 to 3 domains. Add 300+ additional practice questions in weak areas and study scenario-based decision-making.
Master the CISSP CAT Exam with CertLabz
The biggest mistake CISSP candidates make is preparing on platforms that don't model how the real exam scores you. CertLabz is built specifically for the CAT format. Our 75-question CISSP SkillTracker practice exam uses the same difficulty weighting and adaptive logic that ISC2 uses, so the score you see in CertLabz tracks closely with what you'll see on test day.
CISSP Domain Refresher
Earn the CertLabz CISSP Domain Refresher course certificate. Eight focused modules, one per CISSP domain, with scenario questions designed to match the difficulty curve of CAT.
Cybersecurity Analyst Skill Track
The Cybersecurity Analyst Skill Track on CertLabz pairs CISSP domain study with hands-on labs in risk, IAM, cryptography, and incident response, the exact areas CAT pushes hardest on.
75-Question SkillTracker Exam
Our 75-question SkillTracker replicates the CAT-style ISC2 exam: scaled scoring, difficulty weighting, and a clear pass/fail readout against the 700 threshold equivalent.
Per-Domain Readiness
Unlike the real exam, CertLabz shows you exactly which domains are below proficiency and which are above, so you know where to spend the next study hour.
Practice Until You Hit 700+
CertLabz CISSP practice exams use ISC2-aligned scoring with difficulty weighting. Track your performance by domain on the 75-question SkillTracker and identify exactly where you need to study more before booking your exam date.
Start Free Trial See Pricing Free Certificates