CDPSE
The CDPSE is ISACA's technical certification for the people who actually build privacy into systems — engineers, architects, and IT practitioners who turn privacy law and policy into working controls. It's the credential employers increasingly ask for when staffing privacy-by-design roles, and a failed first attempt means a full registration fee paid again and a months-long wait before your privacy career milestone lands. This page breaks down exactly what the exam tests, how PSI delivers it, and how to get it done right the first time.
Pay Only After You Pass
No upfront fee — you settle only after your verified passing score. We advertise guaranteed results — 100% pass guaranteed or money back.
How the CDPSE exam is built — at a glance
120
Every question is multiple-choice with one best answer. There is no negative marking, so an educated guess never hurts your score — leave nothing blank.
3.5h
That's roughly 105 seconds per question across all 120 items. Scenario-heavy questions reward fast reading and decisive judgement over second-guessing.
450
ISACA reports a scaled score from 200 to 800; a 450 is the passing line. The scale is fixed across exam forms, so you are measured against a standard, not a curve.
Unlike the GMAT or GRE, the CDPSE is a linear exam: all 120 questions are fixed in advance, and you can flag items and move freely backward and forward within the 3.5-hour window. There is no penalty for revisiting, so a first pass for the easy wins followed by a review sweep is a sound strategy.
ISACA converts your raw correct count to a scaled 200–800 score so results are comparable across different exam versions. You receive a preliminary pass/fail result on screen at the test center, with the official scaled score and a domain-level breakdown delivered to your ISACA account shortly after.
Four privacy domains — bars show each domain's share of the 2025 job practice
Governance, management, and risk programs that anchor privacy: policies, roles, privacy awareness, and aligning privacy strategy with business and legal obligations.
Identifying, assessing, and treating privacy risk; privacy impact assessments; and mapping technical controls to regulations such as GDPR and CCPA.
Tracking personal data from collection to disposal: data inventory and flow mapping, minimization, retention, classification, and secure deletion across the data life cycle.
The largest domain: privacy-by-design, privacy-enhancing technologies, encryption and de-identification, secure architecture, and embedding controls directly into systems and the SDLC.
Privacy Engineering alone is nearly 39% of the exam, so the CDPSE leans heavily technical — it expects you to translate privacy requirements into real controls, not just recite policy. Candidates from a pure compliance background often underestimate how much hands-on architecture and data-handling knowledge the engineering and data life cycle domains demand.
Two ways to sit the exam — and what to expect on test day
You sit the exam in a quiet, monitored room at a PSI testing center. Staff verify your government-issued ID, store your belongings in a locker, and supervise the room throughout. No personal materials are allowed at the desk; ISACA provides any on-screen tools you need.
You take the exam from a private room with a live PSI proctor watching through your webcam. Before the exam unlocks you run a system check, complete a 360° room scan, and pass an ID verification. A stable connection and a fully cleared, walled-off space are mandatory.
A valid, unexpired government photo ID whose name matches your ISACA registration exactly. The proctor captures a photo and verifies you before the exam begins.
A clear desk, no second monitor, no phone or notes within reach, and a webcam scan of the whole room. No one else may enter for the duration of the exam.
Stay in frame and on-camera the whole time. Breaks are generally not permitted online. Talking aloud, leaving the seat, or losing connection can pause or void the session.
The CDPSE is built for technical privacy practitioners
No bar to sit — but real experience to certify
Difficulty: The CDPSE blends legal-flavoured privacy concepts with genuinely technical engineering, which is what catches people out — pure-compliance candidates struggle with the engineering domain, and pure engineers struggle with governance. Most candidates invest several weeks of focused study, exactly the pressure point our help is designed to remove.
The CDPSE is a technical, scenario-heavy exam where a failed attempt means another full registration fee and a wait before you can re-sit. Exam Assist pairs you with a vetted privacy and ISACA specialist and works on a pay-after-you-pass model — so the risk sits with us, not you. No upfront fee, guaranteed results: Exam Assist handles the sitting end to end, and you settle only after the verified result.
Tell us your delivery method (PSI center or online), your test date, and which domains worry you most. Takes a couple of minutes over WhatsApp, Telegram, or Discord.
We review your timeline and goal and tell you plainly whether it's realistic — before any money is discussed. If it isn't a fit, we say so.
Exam Assist handles the sitting end to end. You're matched with a CDPSE specialist who maps the work around the four domains, the heavy Privacy Engineering weighting, and the PSI environment — discreetly and confidentially.
You only pay once your passing score is confirmed on your official ISACA result. No verified result, nothing owed.
See the full pay-after-you-pass ISACA service, pricing model, and how matching works.
Straight answers about the CDPSE exam
Service, booking, and sibling ISACA exams
Pair with a vetted ISACA specialist on a results-first arrangement. No upfront fee — settle only after a verified passing score.
Explore the service Get StartedShare your test date and target, and get an honest feasibility answer before anything is owed.
Start now CISAISACA's flagship IS audit credential — same 200–800 scoring scale and PSI delivery as the CDPSE.
View exam CISMISACA's management-track security credential for those leading security and governance programs.
View exam CRISCISACA's risk-management certification — a natural pairing with the CDPSE's privacy-risk domain.
View examGet expert CDPSE help with no upfront fee — you settle only after your verified passing score. Honest feasibility answer first, results-first arrangement always.