CISSP candidates must meet the following requirements prior to taking the CISSP examination.

• Subscribe to the (ISC)² Code of Ethics.

• Have a minimum of four years of direct full-time security professional work experience in one or more of the ten domains of the (ISC)² CISSP CBK or three years of direct full-time security professional work experience in one or more of the ten domains of the CISSP CBK with a college degree. Additionally, a Master's Degree in Information Security from a National Center of Excellence can substitute for one year toward the four-year requirement.
  
  Valid professional experience includes information systems security-related work performed as a practitioner, auditor, consultant, vendor, investigator or instructor, or that which requires IS security knowledge and involves direct application of that knowledge.
   

You don't have to be affiliated with an organization to take the CISSP examination.

Maintenance Requirements
Upon successfully passing the CISSP examination, you will receive your certificate and ID card. You also become eligible to be listed in the CISSP Directory, can elect to participate in the Speakers' Bureau, serve on (ISC)² committees and participate in its annual elections.

Recertification is also required every three years, with ongoing requirements to maintain your credentials in good standing. This is primarily accomplished through continuing professional education [CPE], 120 credits of which are required every three years. More information on qualifying CPEs will be available upon certification.

CISSPs must also pay an annual maintenance fee of $85 per year.

For exam objectives, click here.

CISSP is a registered trademark of ISC2..