Eligibility Requirements
for the Certified Information Systems Security Professional (CISSP) Exam

To qualify for this cybersecurity certification, you must have:

At least five years of cumulative, paid, full-time work experience
In two or more of the eight domains of the (ISC)² CISSP Common Body of Knowledge (CBK)

Don’t have enough work experience yet? There are two ways you can overcome this obstacle.

You can satisfy one year of required experience with:

A four-year college degree (or a regional equivalent)
Or, an approved credential from the CISSP Prerequisite pathway

Your second option is to take and pass the CISSP exam to earn an Associate of (ISC)² designation. Then, you’ll have up to six years to earn your required work experience for the CISSP.

Prerequisite Pathway for CISSP

CISSP candidates can earn certification with four years of professional experience instead of five if certain circumstances apply and with appropriate documentation.

The purpose of this is to recognize a broader breadth of relevant experience for qualified CISSP candidates who have received education and/or any credential deemed as approved, and apply it as recognized credit toward required work experience.

A candidate shall be permitted to earn CISSP certification with four years of relevant work experience:

Based on a candidate’s education

Candidates can substitute a maximum of one year of direct full-time security professional work experience if they have a four-year college degree or regional equivalent or an advanced degree in information security from the U.S. National Center of Academic Excellence in Information Assurance Education (CAE/IAE).
Or for holding an additional credential on the (ISC)² approved list below

Candidates can satisfy one year of full time work experience if they hold one of the approved certifications on the below (ISC)² approved list.

Approved Credentials include:

Certified Authorization Professional (CAP)
Certified Business Continuity Professional
Certified Cloud Security Professional (CCSP)
Certified Computer Examiner (CCE)
Certified Cyber Forensic Professional (CCFP)
Certified Ethical Hacker v8 or higher
Certified Forensic Computer Examiner (CFCE)
Certified Fraud Examiner (CFE)
Certified Information Security Manager (CISM)
Certified Information Systems Auditor (CISA)
Certified Internal Auditor (CIA)
Certified Penetration Tester (GPEN)
Certified Protection Professional (CPP) from ASIS
Certified Secure Software Lifecycle Professional (CSSLP)
Certified Wireless Security Professional (CWSP)
Cisco Certified Network Associate Security (CCNA Security)
Cisco Certified Network Professional Security (CCNP Security)
Cisco Cyber Security Specialist Program
CIW – Security Analyst
CIW Web Security Professional
CIW Web Security Specialist
CompTIA Advanced Security Practitioner (CASP)
CompTIA Security+
CyberSecurity Forensic Analyst (CSFA)

GIAC Certified Enterprise Defender (GCED)
GIAC Certified Firewall Analyst (GCFW)
GIAC Certified Forensic Analyst (GCFA)
GIAC Certified Forensics Examiner (GCFE)
GIAC Certified Incident Handler (GCIH)
GIAC Certified Intrusion Analyst (GCIA)
GIAC Global Industrial Cyber Security Professional (GICSP)
GIAC Information Security Fundamentals (GISF)
GIAC Information Security Professional (GISP)
GIAC Mobile Device Security Analyst (GMOB)
GIAC Penetration Tester (GPEN)
GIAC Security Essentials Certificate (GSEC)
GIAC Security Leadership Certification (GSLC)
GIAC Systems and Network Auditor (GSNA)
HealthCare Information Security and Privacy Practitioner (HCISPP)
Information Security Management Systems Lead Auditor (IRCA)
Information Security Management Systems Principal Auditor (IRCA)
Master Business Continuity Professional (MBCP)
Microsoft Certified IT Professional (MCITP)
Microsoft Certified Solutions Associate (MCSA)
Microsoft Certified Systems Engineer (MCSE)
Systems Security Certified Practitioner (SSCP)

Eligibility Requirements for the Certified Information Systems Security Professional (CISSP) Exam

Prerequisite Pathway for CISSP

Based on a candidate’s education

Or for holding an additional credential on the (ISC)² approved list below

Approved Credentials include:

Eligibility Requirements
for the Certified Information Systems Security Professional (CISSP) Exam