CCP exam day: scheduling, proctoring, rules

Everything about taking the CCP exam is in one document, ISACA's 2026 candidate guide for the CCP and CCA, and its rules decide whether you take the exam on the day you booked. This article takes the guide in the order you will meet it: registering, the six-month window, scheduling with PSI, the days before, your ID, the rules in the room, remote proctoring, and what happens after the last question. Every rule below is the guide's, quoted where the wording matters.

Before you register

Two checks come before the fee. First, the name on your ISACA account must be the name on the government-issued ID you will show on the day: the guide says to "ensure your name is the same as what appears on your government-issued identification that you will present on exam day." Second, decide where you will take the exam. ISACA's exams "are computer-based and administered at authorized PSI testing centers globally or as remotely proctored exams", and the guide tells you to verify "there is a PSI test site with availability near you or have a compatible device for remote testing" before you register. For remote testing, run PSI's compatibility check on the device you will use; "If you are using a company device to take your exam, you may need your IT department's assistance or approval."

Registration is continuous, "meaning candidates can register any time, with no restrictions", and the fee is US$575 for ISACA members or US$760 for others, paid in full before you can schedule. What the CCP exam costs lists every fee. During registration you accept ISACA's Terms of Use and the conditions in the candidate guide. Within one business day you receive a "Notification to Schedule" email.

If you need testing accommodations, request them during registration, not after. The request form "must be completed by you and your healthcare professional", requests are not considered until the fee is paid, and "All requests must be submitted to ISACA no later than four (4) weeks prior to your preferred exam date and are only valid for that one exam administration."

Your six-month window

Registration starts a clock. "Upon registration, exam candidates have a six-month eligibility period. This means that from the date you register, you have six months to take the exam." You can schedule an appointment "as early as 48 hours after payment of exam registration fees."

If six months is not enough, "you can purchase a six-month exam extension for US $75." The option appears on your dashboard 30 days before and after the eligibility expires, there is "a maximum of one extension on an exam", and if an appointment is already scheduled, "the exam must be cancelled at least 48 hours prior to the exam date to extend the eligibility."

Scheduling with PSI

Scheduling runs through ISACA's site into PSI's. The guide's five steps: log in to your ISACA account; click Certification & CPE Management; click Schedule Your Exam, which opens the PSI dashboard; click Schedule Exam; and follow PSI's scheduling guide. A confirmation comes from no-reply@psiexams.com.

Two timing rules shape when you can book. "Exam appointments are only available 90 days in advance", so a date further out will not show until it is within the window. And you can reschedule "any time during the eligibility period, without penalty, a minimum of 48 hours prior to the scheduled testing appointment. If you are within 48 hours of your scheduled testing appointment, you must take the exam or forfeit the registration fee." A change of exam language also requires rescheduling, and every change request must be made at least 48 hours before the appointment.

If severe weather or an emergency closes a test center, PSI will try to reach you, the guide suggests checking psiexams.com for closures, and "the exam will be rescheduled at no additional charge."

The days before

The exam has a tutorial of the testing software "after logging onto the testing station before the start of the exam", and the guide asks you to "Pay close attention to the tutorial so as not to miss important information." Beyond that, the preparation is practical.

For a test center: locate the address and confirm the start time, map the route, plan "to arrive at least 30 minutes prior to the exam start time", and plan where your belongings will go, because you will not reach them until the exam is submitted.

For remote proctoring: read PSI's Remote Proctoring Guide, run the compatibility check on the device and the network you will use, and if it is a company device, get your IT department's approval for the secure browser in advance. Clear the desk and the room: the proctor will see both.

Your ID

The ID rule is the one to read twice, so here it is in full. You must present "a current, valid, and original government-issued ID" that shows your name, your signature and your photograph, and "The first and last name on the ID must match the name used to register for the exam, or you may not be permitted entry." All three elements must be on one document, which "cannot be a copy or handwritten." Then the line that surprises people: "Digital IDs and Military IDs are not accepted."

The acceptable forms are a driver's license, a state ID card, a passport, a passport card, a green card, an alien registration, a permanent resident card and a national ID card. The center may ask for a second form, and "If there is any doubt surrounding your identity, you will be turned away from the test and ISACA will be notified. This will be considered a no-show, and you will forfeit your exam fees."

In the room

The rules are the same at a test center and at home. Your workspace "must be completely clear of all other items and materials", and you face the screen for the whole session. The prohibited list covers reference and study materials, paper and notes, calculators, multiple monitors, every kind of communication or recording device (phones, tablets, smart watches or glasses, headphones and earbuds), bags of any kind, weapons, tobacco and vaping, visitors, and "Food or beverages (this includes water and applies to both on-site and remotely proctored exams)." Being seen with a device voids the exam. Screenshots and photos of any part of the exam, "including the exam results screen", are prohibited.

Breaks exist, but the clock does not stop for them: "Two breaks, no longer than ten minutes each, are permitted with permission from your proctor. During the approved breaks, the exam will be paused, but the timer will not stop." To use the facilities you check out and back in, and "no extra time will be permitted." Leaving without authorization can end the exam, and in an emergency the exam is paused and then, once the emergency is confirmed, "the test will end."

The behavior rules are what you would expect, with two worth noting because they are easy to break by habit: "Talking, reading the questions out loud, or moving your lips while reading silently", and discussing exam content with anyone, "before, during, or after the exam", in any medium. The consequences the guide lists run from dismissal and a voided exam to revocation of ISACA certifications and a ban from ISACA exams.

Remote proctoring, step by step

A remotely proctored exam adds a check-in. Before the exam begins, "you must complete a room scan as part of the check-in process": a 360-degree scan showing all four walls, a desk scan "including under your laptop or keyboard", and a scan from the floor beneath your space up to the ceiling. You can do it with an external webcam, with your laptop's camera and a mirror, or with your phone by scanning a QR code; if you use a phone, you remove it from the testing area afterward. ISACA also requires "a mirror check for each exam following a room scan", in which you hold a mirror or a phone up to the webcam to show the screen, the keyboard and all four edges of the screen.

During the exam the proctor watches by webcam and talks to you by chat, in English only. The remote rules repeat the room rules and add a few that only apply at home: no one else in the room, "such as other people standing in, or walking through, the testing area"; no breaks without permission; no other programs or applications on the system, "which includes viewing documents, browsing, remote access, or email access"; no reading questions aloud or talking to yourself; no eating, drinking or chewing gum; and no "Looking away from the computer screen." The guide adds that proctors "will warn you if you make the slightest move out of camera view." A broken rule voids the exam and forfeits the fee.

After the last question

You see a preliminary passing status on screen at once. "The official score will be emailed and available online within ten (10) working days", on the email address in your profile and on the Certifications & CPE Management page. Scores are not given by telephone or fax, and "Question-level results are not provided." The score is scaled from 200 to 800 with 450 to pass, and domain-level results come with it for information only; the CCP passing score explains the scale.

If you pass, the email tells you how to apply for certification, which you must do within one year of passing, with the US$200 application processing fee. If you do not pass, you can ask for a rescore within 30 days of the results for US$75, and you can retake: "Individuals have four (4) attempts within a rolling 12-month period to pass the exam", with a 30-day wait after the first attempt and 90-day waits after the second and third, paying the full fee each time. And "Individuals who pass the exam are restricted from taking the same exam within the application time period of one (1) year."

Concerns about the administration itself, such as site conditions or an exam-day problem, go to ISACA support within 48 hours of the exam, with your ISACA ID, the center, the date and time and the details; ISACA reviews them before the official score is released.

The checklist

• The name on your ISACA account matches your ID exactly, and the ID is physical, current, signed and has your photograph. No digital ID, no military ID.
• You registered no later than six months before you want to take it, and you know your eligibility end date.
• You booked inside the 90-day window and confirmed the PSI email.
• Any accommodation request went in at registration, at least four weeks before the date.
• For remote: the compatibility check passed on the exact device and network you will use, the secure browser is approved on a company device, and you have a webcam, a mirror or a phone for the room scan.
• The room and desk are clear, including the floor under the desk; no water on the desk.
• You plan your two ten-minute breaks knowing the clock keeps running.
• You arrive 30 minutes early at a test center, and never more than 15 minutes late anywhere.
• Rescheduling, if needed, happens more than 48 hours out.

The week before the exam is the time for a full, timed run of 170 questions with the domains mixed as they are on the day, so the pace of 74 seconds a question is a habit before it matters. Timed mock exams in that format are part of the full course, and the format page sets out the exam's structure.