CDPSE

It is a computer-based, multiple-choice exam of 120 questions covering four job practice domains, delivered at authorized PSI testing centers globally or as a remotely proctored exam. Registration is continuous with no restrictions, and you can schedule as early as 48 hours after paying your exam registration fees.

ISACA lists US$575.00 for members and US$760.00 for non-members. If you later apply for certification after passing, there is also a US$50 application processing fee. Compare the member price against membership cost before deciding, since the member rate is substantially lower.

Eligibility is established when you register and is good for six months. Appointments are only available 90 days in advance, so if your preferred site or date is not visible, check back closer to your target date. Verify your eligibility has not expired in the Certification & CPE Management tab if dates seem missing.

Yes. You can reschedule anytime without penalty during your eligibility period, provided you do so a minimum of 48 hours before your scheduled testing appointment. Rescheduling steps are in ISACA's scheduling guide, accessible after logging in to your ISACA account.

ISACA does not publish a passing score, so treat every domain as required. Weighting is a sensible guide to effort: Privacy Engineering carries 39% and Data Life Cycle Management 23%, together nearly two-thirds of the exam. Governance (20%) and Risk Management and Compliance (18%) still supply many questions, so do not skip them.

An online review course covering all four domains with video, interactive eLearning modules and workbooks, with one-year access and 12 CPE on completion; a six-month Questions, Answers & Explanations Database subscription; digital and print Review Manuals; a free 10-question practice quiz; and member-only CDPSE study groups on the Engage community.

Passing is only the first step. To become certified you must pay the US$50 application processing fee, submit an application demonstrating the experience requirements, and adhere to the Code of Professional Ethics and the Continuing Professional Education Policy. You have five years from passing the exam to apply.

Treating CDPSE as a law-reading exam is a frequent mistake: it tests engineering and operational practice, not statute recitation. Other pitfalls include ignoring Privacy Engineering because it feels like security territory, memorizing frameworks without understanding how controls are designed and monitored, and under-preparing for data life cycle tasks such as inventory, minimization, retention and destruction.

ISACA states the certification is globally accepted and recognized and that more than 16,000 people have obtained it since its inception in 2020. ISACA also cites a US$150K+ average annual salary figure on its CDPSE page. Note that this page is independent study material and is not affiliated with or endorsed by ISACA.