CISSP experience requirement and endorsement process

The five-year rule

You need five years of cumulative, full-time, paid work experience in two or more of the eight domains. A four-year degree or an approved credential such as Security+ waives one year.

Part-time work counts proportionally, and internships can count if they were paid and security-related.

Endorsement

After passing, an existing CISSP in good standing must endorse your application within nine months, attesting to your professional experience. If you do not know a CISSP, ISC2 can review endorsements by other qualified professionals.