ISC: Information Systems and Controls
The ISC section of the CPA Exam has a 67.45% pass rate for 2026 through Q2, number 2 of the three discipline sections.
- Pass rate, 2026 through Q2
- 67.45%
- Pass rate, 2025
- 67.79%
- Section type
- Discipline, one of three you choose between
- Length
- 4 hours
- Score weighting
- 60% multiple choice, 40% task based simulations
Discipline: IT governance, SOC engagements, security, and controls. Pairs well with an advisory or IT-audit path. In 2025 it was 67.79%, so it has fallen 0.34 points.
What is tested, by AICPA blueprint area
| Area | Content | Score weight |
|---|---|---|
| ISC.I | Information Systems and Data Management | 35 to 45% |
| ISC.II | Security, Confidentiality and Privacy | 35 to 45% |
| ISC.III | Considerations for System and Organization Controls (SOC) Engagements | 15 to 25% |
Area weightings are the AICPA published score ranges. Pass rates are the AICPA published candidate pass rates for 2026 through Q2, read from AICPA & CIMA on 2026-08-17. The AICPA publishes them quarterly.
Every ISC blueprint area, group and topic
Which discipline to choose compares BAR, ISC, TCP side by side.
Common questions
What is the ISC CPA Exam pass rate?
The ISC section of the CPA Exam has a 67.45% pass rate for 2026 through Q2, number 2 of the three discipline sections.
Is ISC hard?
The ISC section of the CPA Exam has a 67.45% pass rate for 2026 through Q2, number 2 of the three discipline sections. In 2025 it was 67.79%, so it has fallen 0.34 points.
What is tested on ISC?
Discipline: IT governance, SOC engagements, security, and controls. Pairs well with an advisory or IT-audit path. The AICPA blueprint splits ISC into 3 content areas, each with a published score weight range.
How long is the ISC exam?
Every CPA Exam section including ISC is 4 hours. 5 testlets per section: 2 multiple-choice + 3 task-based simulations.