CISSP Requirements
To earn the CISSP you must pass the exam, document five years of qualifying experience, and be endorsed. Here is exactly what each requirement means in 2026, plus the waiver and the Associate path if you are not there yet.
In short: the CISSP requires five years of cumulative, paid work experience in at least two of the eight CISSP domains, an endorsement from an existing certified professional, and agreement to the ISC2 Code of Ethics. A degree or an approved credential waives one year, and if you lack the experience you can pass the exam first and become an Associate of ISC2.
Work experience
The CISSP requires a minimum of five years of cumulative, full-time work experience in at least two of the eight CISSP domains. ISC2 accrues full-time experience monthly and defines a qualifying month as at least 35 hours per week across four consecutive weeks.
Part-time work between 20 and 34 hours per week also counts, converting at 1,040 hours for six months of credit or 2,080 hours for 12 months. Paid and unpaid internships both qualify with documentation on official letterhead, and academic internships may be verified by a registrar.
The experience waiver
A post-secondary degree in computer science, information technology, or a related field, or one credential from the ISC2 approved list, waives one year of the requirement and reduces the total to four years. Only one waiver applies. A degree and a credential cannot be combined to waive two years.
ISC2 revised the approved credential list on April 1, 2026, cutting it from roughly 50 entries to 25. CEH, CISA, CRISC, OSCP, and most GIAC certifications were removed. See the current CISSP experience waiver list for what still qualifies.
The Associate of ISC2 path
If you pass the exam but do not yet have the experience, you become an Associate of ISC2. You then have up to six years to complete the experience requirement and convert to full CISSP status. The Associate annual maintenance fee is $50 rather than $135. This is a common path for early-career professionals targeting the credential.
Endorsement
Within nine months of passing the exam, candidates must complete an endorsement application reviewed by another ISC2-certified professional. If a candidate cannot find an endorser, ISC2 itself can act as the endorser, subject to a verification process. Endorsement carries no fee. The full process is covered in our CISSP endorsement guide.
Frequently asked questions
Five years of cumulative, paid work experience in at least two of the eight CISSP domains. A four-year degree or one approved credential waives one year, reducing it to four.
Yes. You can pass the exam first and become an Associate of ISC2, then you have up to six years to earn the required experience and convert to full CISSP.
A post-secondary degree in a related field, or one credential from the ISC2 approved list, waives one year. Only one waiver can be applied - a degree and a credential cannot be stacked.
Yes. Within nine months of passing you must be endorsed by an ISC2-certified professional. If you do not know one, ISC2 can act as your endorser.