Last updated:
CISSP credential
What is the Associate of ISC2 path for CISSP candidates?
Direct answer
If you pass the CISSP exam without the five years of experience ISC2 requires, you can become an Associate of ISC2 while you earn it. ISC2 allows up to six years as an Associate after passing CISSP. You keep the status by paying a US$50 annual fee and earning 15 CPE credits each year. With the experience, you apply for endorsement and pay a US$85 upgrade fee to become a CISSP (checked 26 October 2026).
the Associate of ISC2 path: a practical decision framework
| Check | How to use it |
|---|---|
| Objective | Use the exact approved designation and distinguish exam passage from holding the CISSP certification. |
| First move | verify current Associate rules, fees, time limits, and experience documentation directly with ISC2 |
| Common trap | Calling yourself CISSP before endorsement or presenting Associate status as the certification itself. |
the Associate of ISC2 path in practice
A candidate passes the exam with two years of qualifying experience and wants to place “CISSP” beside their name while accumulating the remaining experience.
Use only the designation ISC2 currently authorizes for that status, document qualifying work, and complete endorsement when the experience requirement is met.
Associate of ISC2 at a glance (checked 26 October 2026)
ISC2 sets these rules for candidates who pass CISSP without the required experience.
- Joining: choose the Associate path in the certification application after ISC2 confirms your pass.
- Time limit: up to six years to gain the five years of CISSP experience.
- Upkeep: a US$50 annual maintenance fee and 15 Group A CPE credits every year.
- Upgrade: submit the endorsement application before your Associate period ends, then pay a US$85 upgrade fee to start your three-year CISSP cycle.
How the Associate path works
You hold the Associate designation while you build the experience, then apply for CISSP.
Keep a record of qualifying work as you go: dates, hours and which CISSP domains each role covered. ISC2 counts experience monthly, and part-time work of 20 to 34 hours a week counts. A relevant degree or a credential on ISC2's approved list can count for one of the five years.
The common mistake: calling yourself a CISSP too early
Until ISC2 approves your endorsement and the upgrade fee is paid, your designation is Associate of ISC2, not CISSP.
Use “Associate of ISC2” on a CV or profile. Its digital badge shows that you passed an ISC2 exam, but not which one.
After the upgrade
As a CISSP you follow the full member rules instead of the Associate ones.
The annual maintenance fee becomes US$135, and you earn 120 CPE credits in each three-year cycle rather than 15 every year.
Sources and fact check
Source checked: 2026-10-26
- CertArc is an independent exam-preparation platform and is not affiliated with or endorsed by ISC2.
- CertArc uses original practice questions, not live or recalled exam items, and does not reproduce the CISSP CAT algorithm.
- Practice performance is study evidence, not a pass prediction or guarantee.
Frequently asked questions
What is the Associate of ISC2 path for CISSP candidates?
If you pass the CISSP exam without the five years of experience ISC2 requires, you can become an Associate of ISC2 while you earn it. ISC2 allows up to six years as an Associate after passing CISSP. You keep the status by paying a US$50 annual fee and earning 15 CPE credits each year. With the experience, you apply for endorsement and pay a US$85 upgrade fee to become a CISSP (checked 26 October 2026).
Which facts about the Associate of ISC2 path can change?
Exam policies, fees, formats, credential requirements, and product capabilities can change. Check the named primary source and access date before acting.
What is official fact versus CertArc guidance for the Associate of ISC2 path?
Official facts come from the cited certification body. CertArc frameworks, examples, product descriptions, and study recommendations are clearly presented as independent guidance.
What is the main source mistake with the Associate of ISC2 path?
Calling yourself CISSP before endorsement or presenting Associate status as the certification itself. Prefer current first-party evidence and keep unsupported anecdotes separate from verified facts.
How should I use this guide?
Verify current Associate rules, fees, time limits, and experience documentation directly with ISC2. Follow the linked canonical guide when your question needs more detail or a more recent fact check.
