Before you spend a dollar, know whether you can actually earn this credential now. Below is what the certifying body requires — every fact sourced and dated. A recommendation is labelled a recommendation, never a rule.
Eligibility: Not an entry credential. This requires years of verified, relevant work experience to fully earn. You can often pass the exam first and hold a provisional/associate status until you meet the experience — but it is not a first credential for someone with no experience. The alternative path is below.
See the certification itself: CISSP - Certified Information Systems Security Professional · what it costs · how to study for it free.
What it takes to earn it
| Requirement | Detail | Source |
|---|---|---|
| Work experience to earn it | 5 years — 5 years of cumulative paid work experience in 2 or more of the 8 CISSP domains; qualifying part-time work and internships may count. ISC2 states that earning a post-secondary degree (bachelors or masters) in computer science, information technology (IT) or related fields may satisfy up to one year of the required experience, as may one additional credential from the ISC2 approved list, leaving a minimum of 4 years. | official |
| Prerequisites | None to sit the exam. | official |
| Endorsement | Yes — endorsement by an ISC2-certified professional in good standing, completed within 9 months of the exam date. | official |
| Recommended experience (not required) | 5 years of cumulative experience in 2 or more CISSP domains are required for full CISSP certification; up to 1 year may be waived by a qualifying degree or approved credential. | official |
| Open registration | Anyone can sit the exam; full certification requires the experience and endorsement. | official |
| Code of ethics / agreement | Adherence to the ISC2 Code of Ethics is a condition of certification. | official |
If you don't have the experience yet
Pass the exam to become an Associate of ISC2; you then have up to 6 years to earn the 5 years of required experience before the full CISSP is awarded.
Alternative path source: official.
The honest read
If you're changing careers with no relevant experience, this is usually not the credential to start with — pursue an open, entry-friendly certification first and come back to this once you have the experience (or take the provisional/associate route above). Chasing an experience-gated credential first is the most common and most expensive wrong turn.
Being eligible to earn a credential is not the same as getting hired, and no certification guarantees a job. Requirements change — verify on the official page before you pay.
Good to know
Live-checked official CISSP experience requirements and Associate pages; full certification is experience-gated even though the exam may be taken earlier.