Free tools
CISSP eligibility checker
This CISSP® eligibility checker tells you whether your experience already qualifies, qualifies with the 1-year waiver, or whether you should take the exam now as an Associate of ISC2 and earn the experience within 6 years. Enter your full-time years, any part-time work, how many domains your work covers, and whether you hold a qualifying degree or an approved credential.
Last reviewed 28 October 2026 · Sources · Independent; not affiliated with ISC2
Your result
Sit the exam now as an Associate of ISC2
- Experience counted
- 3 years
- Needed
- 5 years in at least 2 domains
- Still to gain
- 2 years
Pass the exam now and you become an Associate of ISC2, with 6 years to gain the remaining experience.
An estimate from ISC2's published rules. ISC2 decides eligibility at endorsement.
The rule the checker applies
ISC2 asks for 5 years of cumulative, full-time work experience in at least 2 of the 8 CISSP domains. Paid or unpaid work counts, including internships. At most 1 year can be waived, by a qualifying degree or by one credential from ISC2's approved list.
If you do not yet have the experience, you can still sit the exam. Passing makes you an Associate of ISC2, and you then have 6 years to earn the experience and become fully certified.
What each input does
| Input | How it counts |
|---|---|
| Full-time years | Counted as they are, as long as the work falls in the CISSP domains |
| Part-time hours per week and months | Counts only between 20 and 34 hours a week; 2,080 part-time hours make one year |
| Domains your work covers | Must be at least 2 |
| Qualifying degree | A bachelor's or master's in computer science, IT or a related field can cover 1 year |
| Approved credential | One credential from ISC2's list can cover 1 year instead; the list was revised on 1 April 2026 |
The waiver is capped at 1 year in total. A degree and a credential do not add up to more.
The three results
- Eligible. You have 5 years or more in at least 2 domains. Book when you are ready; after you pass, apply for endorsement within 9 months.
- Eligible with the waiver. You are within 1 year of the requirement and your degree or credential closes the gap.
- Take the exam now as an Associate. You are short even with the waiver. You can still pass now and earn the remaining experience within 6 years. Associates pay $50 a year and earn 15 CPE credits a year. See Associate of ISC2.
A worked example
Ananya works in Pune. She spent three years full-time as an IT auditor, then two years part-time at 25 hours a week while finishing a master's degree. Her audit work covers Security and Risk Management and Security Assessment and Testing.
- Part-time: 25 hours a week for about 104 weeks is about 2,600 hours, or roughly 1.25 years at 2,080 hours a year.
- Total: about 4.25 years in two domains.
- Her bachelor's degree in IT covers the waiver.
Result: eligible with the waiver. Had her part-time weeks been 15 hours, they would not have counted, because they fall below 20 hours.
Which domains does your work cover?
Most roles touch more domains than people expect. Typical mappings:
| Role | Domains it usually covers |
|---|---|
| GRC, risk or compliance analyst | Security and Risk Management, Asset Security |
| IT or security auditor | Security and Risk Management, Security Assessment and Testing |
| Network or system administrator | Communication and Network Security, Security Operations |
| SOC or incident response analyst | Security Operations, Security Assessment and Testing |
| Identity and access administrator | Identity and Access Management (IAM), Security Operations |
| Developer or DevOps engineer | Software Development Security, Security Architecture and Engineering |
What matters is what you did, not your job title. Describe your duties in the domains' terms when you apply. The domains page lists them in full.
What the checker cannot decide
- ISC2 decides, at endorsement. The checker applies the published rules to the numbers you give it. Whether a given role counts is judged when you apply, and ISC2 audits a random sample of applications.
- Degree equivalence. Degree systems differ by country. If you are unsure whether your degree is a qualifying equivalent, ask ISC2 before relying on the waiver.
- The credential list changes. The approved list was revised on 1 April 2026. Check the current list on ISC2's site.
- Documentation. Internships need confirmation on the organisation's letterhead; keep records of every role.
Read CISSP experience requirements and endorsement for the full detail.
Next steps
- Eligible or on the Associate route, the next step is the same: build a plan with the study plan generator.
- Feel the format with the CAT simulator demo.
- When you are ready to prepare properly, request your invite.
Questions people ask
Am I eligible for the CISSP?
You are if you have 5 years of cumulative full-time work in at least 2 of the 8 domains, or 1 year less with a qualifying degree or approved credential. If not, you can still pass the exam and become an Associate of ISC2.
Does part-time experience count for the CISSP?
Yes, between 20 and 34 hours a week. Every 2,080 part-time hours count as one year.
Do internships count towards CISSP experience?
Yes, paid or unpaid, as long as the organisation confirms the role on its letterhead.
Can I take the CISSP exam without experience?
Yes. If you pass without the experience you become an Associate of ISC2 and have 6 years to earn it.
Can a degree and a credential together waive two years?
No. The waiver is capped at 1 year in total, whichever route you use.
Sources
- ISC2: CISSP experience requirements
- ISC2: CISSP experience waiver updates
- ISC2: Associate of ISC2
- ISC2: endorsement
Exam facts are taken from ISC2's published pages and checked on the date above. Always confirm current details with ISC2 before you book.