cert eligibility

Can you earn (ISC)2 CISSP? Eligibility and prerequisites

Source-cited RoleMath page about Can you earn (ISC)2 CISSP? Eligibility and prerequisites.

Build my personalized career plan

Researched by RoleMath Research. Every figure on this page traces to the official source shown next to it.

Can you earn (ISC)2 CISSP? Eligibility and prerequisites

Before you spend a dollar, know whether you can actually earn this credential now. Below is what the certifying body requires — every fact sourced and dated. A recommendation is labelled a recommendation, never a rule.

Eligibility: Not an entry credential. This requires years of verified, relevant work experience to fully earn. You can often pass the exam first and hold a provisional/associate status until you meet the experience — but it is not a first credential for someone with no experience. The alternative path is below.

See the certification itself: (ISC)2 CISSP · what it costs · how to study for it free.

What it takes to earn it

RequirementDetailSource
Work experience to earn it5 years — 5 years of cumulative, full-time paid experience in 2 or more of the 8 CISSP domains; a post-secondary degree or one approved credential waives up to 1 year (minimum 4 years).official
PrerequisitesNone to sit the exam.official
EndorsementYes — endorsement by an ISC2-certified professional in good standing, completed within 9 months of the exam date.official
Open registrationAnyone can sit the exam; full certification requires the experience and endorsement.official
Code of ethics / agreementAdherence to the ISC2 Code of Ethics is a condition of certification.official

If you don't have the experience yet

Pass the exam to become an Associate of ISC2; you then have up to 6 years to earn the 5 years of required experience before the full CISSP is awarded.

The honest read

If you're changing careers with no relevant experience, this is usually not the credential to start with — pursue an open, entry-friendly certification first and come back to this once you have the experience (or take the provisional/associate route above). Chasing an experience-gated credential first is the most common and most expensive wrong turn.

Being eligible to earn a credential is not the same as getting hired, and no certification guarantees a job. Requirements change — verify on the official page before you pay.

Good to know

The most-marketed goal credential that is most often mistaken for an entry certification.

Sources

  • Official eligibility / requirements page: https://www.isc2.org/certifications/cissp/cissp-experience-requirements

Citation Ledger

IDSupportsEvidenceSource
CIT-01Eligibility & prerequisites for (ISC)2 CISSP (as of 2026-06-14)Official certifying-body eligibility pagelink

Ready to see how this fits your background?

Not sure which credential fits where you are now? Start the RoleMath planner to see which roles and entry-appropriate certifications match your background.