ISC2 CGRC

Pass rate

ISC2 logo

ISC2 CGRC Pass Rate

CGRC

The score you need to pass the ISC2 CGRC certification exam, what the cut score actually means, and how to read your mock results against it.

70% to pass
150 questions
2/10 difficulty

The number you need to hit

Published cut score for this certification.

Passing score
70%
700 out of 1000 points
Margin
30%
room for wrong answers, on a flat mock
Wrong answers allowed
45
out of 150 questions

Pass score vs pass rate

Two different numbers that get mixed up constantly.

Pass score (cut score)

The scaled score the vendor publishes. For the ISC2 CGRC it is 70%. This is the number you can actually prepare against, and it is the one that decides your result on exam day.

Pass rate (percentage of candidates)

The share of candidates who pass. ISC2 generally does not publish this for individual exams, and the numbers you find online usually come from candidate self-reported surveys. We would rather tell you nothing than tell you a figure we cannot source.

Where you lose points

The exam is not scored flat. Each domain carries its own weight, so a domain where you lose everything can sink a score that looks fine on paper.

System Compliance14%

Losing this domain entirely costs you 14.000000000000002% of the exam, and it has 21 practice questions here.

Scope of the System10%

Losing this domain entirely costs you 10% of the exam, and it has 15 practice questions here.

Compliance Maintenance13%

Losing this domain entirely costs you 13% of the exam, and it has 19 practice questions here.

Implementation of Security and Privacy Controls17%

Losing this domain entirely costs you 17% of the exam, and it has 26 practice questions here.

Assessment/Audit of Security and Privacy Controls16%

Losing this domain entirely costs you 16% of the exam, and it has 24 practice questions here.

Selection and Approval of Framework, Security, and Privacy Controls14%

Losing this domain entirely costs you 14.000000000000002% of the exam, and it has 21 practice questions here.

Security and Privacy Governance, Risk Management, and Compliance Program16%

Losing this domain entirely costs you 16% of the exam, and it has 24 practice questions here.

The practical version: the ISC2 CGRC is not passed by knowing most of the content. It is passed by being strong in the domains that carry weight, and by not leaving one of them empty.

More about the ISC2 CGRC exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the ISC2 CGRC exam.