I have had this questions come up a lot lately, and I can’t answer you, because the decision is ultimately (ISC)².
Take a look at the official guide by (ISC)² here: www.isc2.org/Certifications/CISSP/Experience-Requirements
A general rules of thumb:
- 5 years full time IT Security work experience in 2 or more of the 8 domains is required.
- 1 year can be deducted if you have a 4-year college degree OR another IT Security certification (but you can deduct only 1 year in total).
- If you do not have the experience, you can still take and pass the exam, but you will be Associate of (ISC)² until you have the required experience, you have 6 years to get it.
- If you work with IT Security, but it is only part time, you can use 50% (or whatever percentage) you work with it as experience. 50% = 8/10 years full time.
The final decision is always (ISC)²’s
