ISP Passing Score 2026: Exactly What You Need to Pass

The Number: 70% on 110 Questions

The Industrial Security Professional (ISP) credential, administered by NCMS, Inc., The Society of Industrial Security Professionals, uses a single published pass mark: a minimum passing score of 70%. The exam consists of 110 multiple-choice questions delivered in a 150-minute session, and the revised version of the exam launched on April 15, 2025.

That is the whole headline, and it is refreshingly simple. There is no scaled score to decode, no separate cut score for each content area in the public materials, and no published curve. But a passing score is only useful if you understand what surrounds it: how questions are counted, how the exam treats close answers, what the open-book interface does and does not allow, and what a miss costs you. This article walks through each of those pieces for the ISP, which protects government classified information under the U.S. National Industrial Security Program (NISP).

If you are still deciding whether to sit for the credential at all, start with ISP Requirements 2026: Eligibility, Prerequisites & How to Qualify and then return here to plan around the score.

How the Exam Is Scored

Equal weight, best answer, no partial credit

According to NCMS administration guidance, individual questions carry equal weight. Each item is scored on a best-answer basis: you choose the single option that most fully fits the scenario, and that choice is either correct or incorrect. There is no partial credit for a "nearly right" selection, and final scores are not rounded up. A result that falls short of 70% does not become a pass through rounding.

Best-answer scoring matters for how you read questions. In a field like industrial security, several answer choices can look defensible on the surface, because real-world security practice often involves overlapping rules. The exam rewards the option that best matches the governing requirement, not the one that merely sounds prudent.

The arithmetic of 70%

Because the number of questions and the threshold are both published, you can do the math yourself without inventing any statistics. Seventy percent of 110 questions is 77, so a candidate needs 77 correct responses to reach the minimum. Treat that as a planning figure derived directly from the published 70% and 110 questions, and confirm against NCMS materials at registration in case anything changes.

What 70% Means in Practice

A 70% bar sounds forgiving until you remember that the questions are drawn from 11 distinct domains, each with its own regulatory vocabulary. You can miss roughly three in ten questions overall, but you cannot assume those misses will fall conveniently in the areas you find hardest, because the public sources do not tell you how many questions each domain contributes.

Two practical consequences follow:

• Breadth beats depth in one corner. Mastering Personnel Security while neglecting Information Systems Security is a risky trade when you do not know the domain split.
• Reference speed matters. With 110 questions in 150 minutes, you have a little over a minute and a third per question on average, and some of that time may go to searching the approved reference documents.

For a candid look at how candidates experience the difficulty of that bar, see How Hard Is the ISP Exam? Complete Difficulty Guide 2026. For what the available data does and does not say about outcomes, read ISP Pass Rate 2026: What the Data Shows.

Why Domain Weights Are Not Published

The 11 examination categories appear in the NCMS ISP Certification Program Manual (ISP-2004, version 3.6, effective April 2025) and are corroborated by the ISP-3034 program requirements document. Neither source publishes percentage allocations for those categories. The NCMS Study Resources page also corroborates the category list, though its linked Categories & Topics and Detailed References matrices sit behind a sign-in and were not reviewed for this article.

Without published weights, the sensible strategy is to prepare all 11 domains to a passing standard and then deepen the ones that are both central to NISP work and personally unfamiliar. The full list is covered in ISP Exam Domains 2026: Complete Guide to All 11 Content Areas.

Domain-by-Domain Priorities

The 11 categories below are the official headings. The notes describe the kind of competence a candidate should be able to demonstrate; they are study orientation, not a statement of how many questions each domain contributes.

For a structured review of all of these, pair the list with the ISP Study Guide 2026: How to Pass on Your First Attempt, and keep the ISP Cheat Sheet 2026: One-Page Review of Must-Know Facts handy for quick recall.

The Open-Book Factor

The ISP exam has an open-book element, but it is narrow. Candidates may use approved, searchable electronic reference PDFs supplied inside the testing interface. External online resources are prohibited, and so is consulting with other people. In other words, you are searching a defined document set, not the open internet.

This changes how you should think about the 70% threshold:

• Searching is a skill. Knowing which reference to open, and what term to search, saves minutes you would otherwise spend scanning.
• Memorization still matters. With roughly 1.4 minutes per question on average, you cannot look up every item. Reserve lookups for specifics such as precise requirements, and answer scenario judgment questions from understanding.
• Practice with the actual references. Become comfortable moving through the same regulatory documents the interface provides, so that on exam day you are not learning navigation under a clock.

Fees, Retakes, and the Cost of Missing 70%

Because your passing score determines whether you pay twice, it helps to see the money alongside the number. The exam is delivered at Prometric test centers or through ProProctor remote proctoring. NCMS membership is not required to test, but it changes the price.

An NCMS preparation presentation dated June 4, 2025 also lists a USD 50 international surcharge. That is a dated published fee rather than a separately confirmed 2026 change, so verify it at registration if it applies to you. For the full financial picture, see ISP Certification Cost 2026: Complete Pricing Breakdown.

Retake rules

• A 30-day wait is required before retesting.
• No more than four attempts are allowed in any 12-month period.
• Retest fees are lower than the initial fee, but they are still real money, and the wait costs you time on a career timeline.

The financial and scheduling pressure is the best argument for not testing at the edge of 70%. If you want to see how scheduling windows fit together, read ISP Exam Dates 2026: Testing Windows, Deadlines & Scheduling.

Old Rules You May Still See Online

Some older NCMS FAQ wording and residual clauses in the manual or brochure still mention requirements that have since changed. When sources conflict, the dated changes and the current Testing Process guidance control. Pay particular attention to these points, because they affect how you plan your attempt:

One more detail that sometimes confuses candidates: NCMS ended the ISP's ANAB accreditation in March 2024 while continuing the certification program itself. The passing score and exam format described here reflect the current program, and the credential remains administered by NCMS. If you are weighing the credential's value in light of that, Is the ISP Certification Worth It? Complete ROI Analysis 2026 covers the decision in depth.

A Domain-Ordered Prep Sequence

Because the public materials give no domain weights, a sensible schedule orders the work by dependency rather than by percentage. The logic below is built around how the domains build on each other. Adjust the pacing to your own timeline; the point is the sequence.

Reserve your last practice runs for timed conditions. Pacing is a real part of clearing 70%, and the ISP Exam Prep practice tests are designed to help you rehearse that. For structured coursework options beyond self-study, see ISP Training.

After You Pass

Clearing the 70% threshold is not quite the finish line. Applicants must have submitted a detailed resume, a signed Candidate Confidentiality & Conflict of Interest (CCOI) agreement, the application, and payment before testing, and a post-pass CCOI completes certification. Allow at least 30 days for application processing, and remember that the current Testing Process page provides six months after approval to schedule and take the exam.

Once certified, maintenance is a three-year cycle requiring 60 NCMS CEUs with supporting documentation. No more than 30 may come from membership or voluntary service, and at least half must come from qualifying education, instruction, presentations, or publications. NCMS applies its own CEU award schedule. Fees double during the one-month late-submission window, and a lapse beyond that requires a fresh application and examination at full cost. Note that the renewal rules cited here rest on the 2023 recertification guide and the April 2025 program manual; a newer edition could not be verified, so check the NCMS recertification page for any updates.

Employers that sponsor cleared programs, such as defense contractors and their facility security teams, are the typical audience for this credential. To explore what roles look like and how pay is framed, see ISP Jobs and ISP Salary Guide 2026: Complete Earnings Analysis. If you are new to the credential's terminology, What Is ISP Certification? is a good starting point.

FAQ