- CDSE's Certification Tracker reports a CY-2025 SAPPC pass rate of 43.46%, with 113 passing out of 260 delivered.
- June 2026 shows 62.5% (10 of 16), but that sample is far too small to treat as a trend.
- The exam has 110 questions, only 74 scored, and you cannot tell which ones count.
- Information Security (31%) and Personnel Security (28%) together make up 59% of the blueprint.
Reading the SAPPC Pass Rate Without Fooling Yourself
- Reading the SAPPC Pass Rate Without Fooling Yourself
- The Official Numbers From CDSE
- Why the Two Figures Differ So Much
- Who Actually Sits This Exam
- How the Exam Format Shapes Outcomes
- Where Candidates Win or Lose: Domain Weights
- Why No Pass Percentage Is Published
- A Domain-Ordered Plan Based on the Weights
- After a Pass: Two-Year Validity and 100 PDUs
- Frequently Asked Questions
Key Takeaways
- CDSE's Certification Tracker reports a CY-2025 SAPPC pass rate of 43.46%, with 113 passing out of 260 delivered.
- June 2026 shows 62.5% (10 of 16), but that sample is far too small to treat as a trend.
- The exam has 110 questions, only 74 scored, and you cannot tell which ones count.
- Information Security (31%) and Personnel Security (28%) together make up 59% of the blueprint.
- Unanswered questions are marked incorrect, so answer every item before the 2 hour 15 minute clock expires.
Search for the Security Asset Protection Professional Certification (SAPPC) pass rate and you will mostly find guesses. This article sticks to what the Center for Development of Security Excellence (CDSE) has actually published, explains what those figures can and cannot tell you, and turns them into a preparation plan. If you are still orienting yourself, start with What Is SAPPC Certification? and then come back.
The Official Numbers From CDSE
CDSE administers the SAPPC under the Department of Defense security professional certification program and publishes statistics through its Certification Tracker. Two data points matter right now:
| Period | Delivered | Passed | Pass Rate |
|---|---|---|---|
| Calendar Year 2025 | 260 | 113 | 43.46% |
| June 2026 | 16 | 10 | 62.5% |
These are official program statistics, but they are period-specific. Neither is a lifetime pass rate, and neither should be quoted as "the" SAPPC pass rate without the date attached. The calendar-year figure is the more reliable of the two because it rests on 260 delivered exams. The June 2026 figure rests on 16, which means a swing of just two or three candidates moves the percentage by double digits.
Why the Two Figures Differ So Much
It is tempting to conclude that the exam got easier in 2026. The data does not support that. Several ordinary explanations are more likely:
- Sample size. Sixteen candidates is a single small cohort. Normal variation alone can produce a 20-point swing.
- Cohort composition. A month heavy with candidates who studied D-SEBOK and the CDSE preparatory tools will look different from a month of cold attempts.
- Time window. A full calendar year blends strong and weak months, which smooths the result toward a more representative number.
Treat the 2026 monthly figure as a data point to watch, not a reason to relax. As more 2026 results accumulate, the picture will firm up. Check the Certification Tracker directly for updates rather than relying on third-party summaries, including this one.
Who Actually Sits This Exam
The SAPPC is not an open-enrollment credential. Candidates must already hold the SFPC certification, and general SPēD eligibility applies: eligible DOD personnel, federal employees of participating agencies, and qualifying contractors performing security functions. You can review the full eligibility picture in SAPPC Requirements 2026.
That filter matters for interpreting the pass rate. Everyone testing has already cleared a prior professional certification, which means the 43.46% CY-2025 result describes a pool of working security practitioners, not a general population. A sub-50% result in a pre-qualified group is a signal that the exam rewards breadth and precision, not just on-the-job familiarity.
How the Exam Format Shapes Outcomes
The SAPPC assessment is 110 multiple-choice questions delivered through Pearson VUE in 2 hours 15 minutes. Of those, 74 are scored and 36 are unscored. You are not told which is which. Questions come in both stand-alone and scenario-associated forms.
Format Facts That Affect Your Strategy
Four details from the August 2026 handbook change how you should sit the exam.
- Dichotomous scoring: one point per correct scored answer, no partial credit.
- Unanswered equals incorrect: leaving a blank costs you the same as a wrong answer, so never skip without guessing.
- Hidden unscored items: treat all 110 as if they count; do not spend extra time trying to spot "pilot" questions.
- Scenario items: these require applying a standard to a described situation, not reciting a definition.
At 110 questions in 135 minutes, you have a little over a minute per item. Scenario-associated questions consume more of that budget, so the pacing discipline of moving past stuck items and returning later is worth rehearsing in practice sessions. If you need the scheduling side, see SAPPC Exam Dates 2026.
Where Candidates Win or Lose: Domain Weights
CDSE's handbook calls these the SAPPC Areas of Expertise and supplies the official weights. The distribution is lopsided in a way that should drive your hours:
| Area of Expertise | Weight |
|---|---|
| Information Security | 31% |
| Personnel Security | 28% |
| General Security | 18% |
| Industrial Security | 13% |
| Physical Security | 10% |
Information Security (31%)
The single largest area and the one most likely to decide your result. Official subheadings include Information Security Fundamentals, Classification and Declassification Concepts, Classification Management, Information Protection Requirements, and Cyber for Security Professionals.
- Be able to distinguish classification concepts from classification management tasks.
- Know protection requirements well enough to apply them to a scenario, not just define them.
- Do not skip the cyber-for-security-professionals content; it is named explicitly in the blueprint.
Personnel Security (28%)
Official subheadings include Personnel Security Fundamentals and Personnel Security Standards. This area is heavy on standards and process, which suits candidates with adjudication or investigation exposure but can trip up those whose daily work sits elsewhere.
- Study the standards as a framework, then practice applying them to described cases.
- Expect scenario-associated questions here.
Information Security and Personnel Security together account for 59% of the blueprint. Physical Security at 10% is the smallest area, but with 74 scored questions even a thin domain contributes several points. For the full breakdown, read SAPPC Exam Domains 2026.
Why No Pass Percentage Is Published
You will see articles claiming a specific SAPPC passing percentage. The current public handbook describes dichotomous scoring and one point per correct scored answer, but the public source we reviewed does not state a fixed numerical pass mark. Any single number you encounter online should be treated as unverified. We cover what is and is not known in SAPPC Passing Score 2026.
The practical consequence is simple: you cannot study to a threshold, so study to mastery of the blueprint. Because every unanswered item is marked incorrect and you cannot identify the scored questions, the only safe approach is to answer everything and maximize accuracy across all five areas.
A Domain-Ordered Plan Based on the Weights
The SAPPC is training agnostic. No prescribed course is required before the assessment. CDSE provides Competency Preparatory Tools through STEPP and identifies D-SEBOK as an additional foundation resource, so those are the natural starting materials. Here is one way to sequence the weights over six weeks; adjust to your own gaps.
Information Security Foundations
- Work through the STEPP preparatory tools and D-SEBOK sections on information security fundamentals.
- Cover classification and declassification concepts.
Information Security Applied
- Classification management and information protection requirements.
- Cyber for security professionals.
Personnel Security
- Fundamentals first, then standards.
- Practice applying standards to short scenarios.
General Security (18%)
- Cover the cross-cutting content that connects the other areas.
Industrial and Physical Security
- Industrial Security (13%) and Physical Security (10%) in one block.
Timed Mixed Practice
- Full-length sessions of 110 questions in 135 minutes.
- Review every miss by domain and return to the weakest area.
The logic is front-loading the heaviest areas while your energy is highest, then using the final week to expose pacing problems. Pair this with the SAPPC Study Guide and, for last-day review, the SAPPC Cheat Sheet. When you are ready to test yourself under realistic conditions, our SAPPC practice tests mirror the multiple-choice, scenario-driven style the exam uses.
After a Pass: Two-Year Validity and 100 PDUs
The pass rate matters, but so does what comes after. The certification is valid for two years. To maintain it, you need an active DAU certification account and at least 100 professional development units earned during the two-year maintenance period. That is worth knowing up front because it shapes the long-term cost of ownership. For the money side, see SAPPC Certification Cost 2026; note that the current CDSE handbook and resources we reviewed do not state a public candidate exam fee, so we do not quote one.
Key Takeaway
Plan around the CY-2025 rate of 43.46%, not the 62.5% from a 16-candidate month. Weight your hours toward Information Security and Personnel Security, answer every question, and treat the pass rate as a reason to prepare thoroughly, not a prediction of your own result. If you are weighing the investment, Is the SAPPC Certification Worth It? covers the career side.
Frequently Asked Questions
CDSE's Certification Tracker reports 43.46% for calendar year 2025 (113 passed of 260 delivered) and 62.5% for June 2026 (10 passed of 16 delivered). These are period-specific figures, not a lifetime rate.
Not reliably. It is based on only 16 delivered exams, so a few candidates can swing it dramatically. The larger CY-2025 sample is a better planning benchmark.
The public handbook states dichotomous scoring with one point per correct scored answer, but the reviewed public source does not give a fixed numerical pass mark. Answer every question, since unanswered items are marked incorrect.
Information Security at 31% and Personnel Security at 28% carry the most weight, together 59% of the blueprint. Start there, then cover General Security (18%), Industrial Security (13%), and Physical Security (10%).
No. The assessment is training agnostic with no prescribed course. CDSE offers Competency Preparatory Tools through STEPP and points to D-SEBOK as a foundation resource. See SAPPC Training for options.