Meeting the CISSP Experience Requirement

After you pass the CISSP exam, you’ll need to provide evidence that you have five years of experience in the information security field. In this video, I break down the CISSP experience requirement and help ensure that you’re ready to earn your certification.
#CISSP #ISC2 #cybersecurity

[@bigbooduh]

I did not know cissp had a list of certs they accepted that would wave off 1 year of work experience. Thanks for this, so glad I did my OSCP

[@djk-stonegh9897]

Thanks Mike, this video was what i needed

[@sugarskulllyfe5890]

awesome i had no idea you had a youtube channel

[@yashashvimundhra9357]

Hi Mike, I have a 4 year engineering degree in electronics and communication from a college in India - will that offset one year of work experience requirement? Or the college has to be specifically be listed in ISC list of approved colleges?

[@ronalda.saname396]

If, a person just graduated, how does ONE gets the experience? A CATCH 22.

[@CertMike]

If you don’t have experience, I’d suggest starting with the Security+ certification.

[@madovercloud3496]

I was an aws administrator and now a cloud architect... will that be sufficient for 2 domain requirements?

[@sagar-panchal]

Hello, I have bachelor of engineering degree in electronics and communication engineering and total 15 years of experience in software development and as well as verification. Also worked on projects related to networking and security. Can I count this experience as eligibility requirements for cissp?

[@EllencyOfficial]

Hey! 😊 Does working as a CCNA engineer count as experience?

[@tiffanysmith2343]

How do the experience requirements work or differ for those in IT leadership positions - including positions that have responsibility for areas included in the 8 CISSP domains? The leader may not have been directly provisioning user account access or submitting PCI evidence, but did have responsibility for those areas and the success and maintenance of PCI compliance. Would that count as qualifying experience?

[@frob530]

Yes !

[@sravani2706]

Hello sir, I'm a SAP basis consultant. Recently I got internet on cyber security and related stuff. Is there any possible way to switch from Basis consultant to Security Engineer. Please reply.

[@Rixx20]

I passed the CISSP exam last week but don't know anyone with an ISC2 certification to endorse me. I hold several network security certifications (mostly Juniper), 5 years of experience working as a cable installer and service tech, and another 9 years as a network engineer. Are W2s an acceptable form of employment verification if I cannot locate anything on company letterhead for positions I have held?

[@sm1tty031]

I have been in Information Technology for 26 years. I was working in Information Security before it was called Information Security. The last 4 years of my career Ive actually am working in a Information Security role, However for more than a decade previously I have been a Senior Systems Administrator which covered all of the domains in one way or the other. How does that quantify for the test? I now want to take the CISSP and I feel that I have the paid experience even though my title was something else.

[@frob530]

It counts !

[@FahmidWasif]

If anyone has IT manager role who supervises IT security too? Those years count ?

[@Tokogeta]

On the official website it states it accepts paid and unpaid internship as well. Update this video?

[@VF5]

I recently passed the SSCP exam, with the CISSP as the "endgame" goal. I have PMP and have been working in cyber security industry (government contract) for the last three years. My actual experience, however, is on the PMO and project management side of the contract. For example, I support the contract risk management (using PMI framework), and IT assessment (project schedule, etc); but not actually doing the IT assessment itseft (security control assessments). How can I translate my experiences to meet the CISSP requirements??

[@DaedalusMinion]

lol I'm in the exact position as you, let me know if you ended up doing this

[@VF5]

@@DaedalusMinion CISSP? Nah...decided not to pursue it at this time.

[@DaedalusMinion]

@@VF5 thanks mate- I think I’m going to try giving it a shot

[@jasoncummings7052]

Hello Mike thank you for the videos. They are very helpful. On the subject of experience what about those who has never worked with CISSP pros but have over 15 years experience in Windows Networking and security, Firewall, client side and network encryption?

[@CertMike]

That will work just fine.

[@sm1tty031]

This is my question as well. When you work in a small shop you do everything.

[@iq2823]

@@CertMike Dear Mike: I have a question here about Experience demonstration. Questions are: 1. Is there some specific Experience Letter to be shown to ISC2 including IT Networking Security, as most of the companies experience letter format is very General and they don't mention our Activities or Role rather they just focus on our Full Time or Part Time working duration, some best wishes and compliments and That's it. Please advise, if ISC2 consider / ask for some specific Experience Letter Format in compliance the requirements of CISSP Exam? 2. I have more than 15 years of IT Networks Security and worked on World's mega Projects i.e. Dubai Airport Terminal-3, Dubai Airport Concourse - 3, Dubai Metro and many others, started my career from IT Network Engineer to IT Network Systems Manager [with Master Degree in IT (MIT) from my home country + Cisco Networks Security Certifications (CCNP) + PMP Certification and lot of other Trainings and Certifications), during my whole career (job experience) I just changed two (2) companies and have experience letter from both the companies. What if, I show / present my old company's experience letter (verified and verifiable further) to ISC2, will it be acceptable i.e. My old Experience from 2006 to 2013 and 2013 to 2018 and on wards. Please advise, would it be acceptable or not?

[@st4rbuk]

Hi there thanks for this video. If you’ve got experience troubleshooting network connectivity issues where you also identified firewall rules that needed to be added (but communicated those changes to another team to implement them) does that count towards the 5 years?

[@CertMike]

Sounds relevant to me!

[@adamnawzad]

Hi, got a question; I got more than 5 years of experience however the title of my job did not include "security" I worked, as a Network Admin, IT Coordinator, IT Manager, and was recently promoted to senior IT manager. adding I have a college degree in computer science. all my jobs were full-time and paid and they surely covered more than 2 domains from what you mentioned. the question is, would ISC2 be fine with that?

[@frob530]

Hi, probably !

[@TheLORDNIGHTSHIELD]

I Still do not understand how exactly they calculate Years. I mean a year have 52 weeks, but they calculate 4 weeks of experience as 1 month. Which will make 12 month of 48 weeks. Then what about 4 weeks left which will make 365 days like 13 month experience based on their formula 4 weeks = 1 month. I asked ISC2, and waiting for reply. If they answer i will be back.

[@ardean111]

Maintaining this certification with the CEU's makes it too much of a pain in the ass for me.

[@yingmin100]

What if you work 50 hours a week for three years?

[@ronchylarge2860]

Serious question! Do you get a year down for every certification you get? I'm about to go for my CISSP cert but I don't have that 5 years experience. But I got some certifications. A+, Network+, security+ and CCNA. Does that mean I'm 4 years down out of 5?👀👀👀 Please let me know. Cuz I can take an other one and then go for CISSP

[@thewordens3965]

I’m wondering the same thing

[@maliacherry]

@@thewordens3965 Hi! No, you can only cover one year out of the requirements with either a college degree or a certification. So only one of those certs would count towards your 5 year total.

[@matthieumbayo7452]

Hi Mike, thanks for this video. I am planting to take my CISSP before December 2022, and I need guidance on study material, practices, registration, and requirements. Can I join you study groupe if there are some people with whom we can connect on this.

[@frob530]

Joining Study group is free, but get the books (study guide and practice tests)

[@matthieumbayo7452]

How do I join ? I have the CBK.

[@sidibhaparmar2382]

Sir, I have 6 years of working experience in physical security field as Security Officer . also I am MCA pass-out in 2016. can please let me know that, I am eligible for CISSP certification? ur comment will be appreciated.

[@frob530]

Yes if your position covers at least 2 domains :)

[@sa77if]

Hi Mike, I am a sysadmin but I do most of the security stuff at the company would this count if my title is system administrator? thanks

[@frob530]

Yes ! No need a position with security title !

[@brianturney2124]

This video doesn't cover 'how' the paid work experience is actually verified. I've worked in IT since 1995. Some employers went out of business, others like Microsoft are still around, I also operated my own security and network consulting business for many years successfully. What do you give them to prove paid work history when self employed, or for work done 15+ years ago? (tax filings? client references?...) And lastly but not least does the work experience have an expiration date, such as, can your work done 20 years ago apply toward this experience?

[@sm1tty031]

I feel the same, Ive been in IT since 1996 in ever changing roles. How to quantify it all? Im now the "old man" of my Team and constantly being asked for input and help as "Ive seen it all before" How to put it on paper???

[@brianturney7599]

@@sm1tty031 I hear ya. I'm right there with ya. I started my first IT job doing tech support in 1993 for a retail business with several statewide locations. I made a whopping $5.35 an hour to get into that role. haha

[@user-lu9lo6tx6s]

Hi Mike, Does each Certification counts to 1 yrs? If I have 3 certification, that means, I need to show only 2 yrs of work experience in a field of domain qualified for CISSP?

[@CertMike]

No. You can only waive one year of the requirement.

[@francisstocktilliii2413]

Do certifications count as years of experience for cissp

[@trailblazrr2991]

Internships count now

[@CristianCsikiA]

How will endorsement from another CISSP member will count? Thank you

[@CertMike]

The endorsement is required to validate your experience. It doesn’t count as experience itself.

[@radiokepler]

What about if he has experience in GRC?

[@CertMike]

It would depend upon the details, of course, but GRC experience would likely qualify under domain 1.