Certification Eligibility: Common Questions Answered

My experience is part-time. Does it count?

Often, yes — but you must convert it the provider's way. ISC2 counts part-time work explicitly for the CISSP: 20–34 hours a week accrues at a defined rate, where 1,040 hours equals six months and 2,080 hours equals twelve months of the requirement. ISC2 also counts documented internships, paid or unpaid. PMI's PMP experience is measured in months of project-leadership experience; how overlapping or fractional engagements are counted is an application-form question, so follow the current guidance on pmi.org when totting up your months rather than estimating.

My job title has never been "project manager" or "security engineer". Am I ineligible?

No. Experience requirements are about what you did, not what your badge said. For the PMP, leading and directing project work counts regardless of title — coordinators, team leads and engineers who ran deliveries can all document qualifying months. For the CISSP, the requirement is cumulative paid work in two or more of the exam's eight domains; a systems administrator who handled access management and security operations is accruing domain experience without a security title. Describe the work in the provider's vocabulary (the exam domains, PMI's experience categories) when you apply.

Can I take the exam before I have the required experience?

Sometimes — via a formal early pathway, never by fudging the application.

ISC2's route is the Associate of ISC2: pass the CISSP (or CCSP or SSCP) exam without the experience, hold Associate status, and you then have six years to accumulate the five years of experience for CISSP. That is a legitimate, provider-designed sequence, and a sensible one for someone two years into a security career.

PMI has no equivalent: eligibility is checked at application, before you schedule. Misstating experience is the wrong shortcut everywhere — PMI applications can be audited, and ISC2 performs random audits of certification applications. If you genuinely cannot meet a credential's bar yet, take the one designed for where you are (CAPM instead of PMP; SSCP — which asks for one year of experience — or the entry-level Certified in Cybersecurity instead of CISSP) and trade up later.

Can another certification substitute for experience or training?

In specific, published ways:

• Towards CISSP: an approved credential — ISC2's list includes CompTIA Security+, CCSP, CISM and others — waives one year of the five. Only one waiver applies in total, so a degree plus Security+ still waives just one year.
• Towards CCSP: an active CISSP satisfies the entire CCSP experience requirement.
• Towards PMP: holding the CAPM satisfies the 35-contact-hour education requirement (it does not substitute for experience).
• Towards ISC2 concentrations: ISSAP and its siblings are usually taken as CISSP-plus-two-years, but ISC2 also lists an alternative path of seven years' cumulative relevant experience without the CISSP.

No provider here accepts another body's certification in place of its exam.

My degree is unfinished, or from outside the US. Which path am I on?

Providers frame education requirements in functional terms — PMI's lower tier is a "high school diploma or global equivalent", and CAPM asks for a "secondary degree (high school diploma or global equivalent)" — so a qualification from any country counts at the level it genuinely represents. An unfinished bachelor's is the more delicate case: until it is conferred, the safe assumption is that you sit on the secondary-education path with its longer experience requirement, and that is the basis you should apply on. If you believe partially completed study should count differently, ask the provider's certification support in writing before submitting; an application built on an optimistic reading of "degree" is what audits exist to catch.

I need testing accommodations. Does that affect eligibility?

No — accommodations affect how you test, never whether you qualify. The major programmes all offer accommodations such as extra time or a separate room, but every one of them requires approval before you schedule the exam, not on test day: Microsoft routes requests through its accommodations page, AWS through your certification account before each exam, and CompTIA notes that appointments booked with accommodations carry their own cancellation terms. Build the approval step into your timeline — it belongs before booking, alongside the eligibility check itself.

Does eligibility expire once I'm approved?

At PMI, yes: an approved PMP application opens a one-year eligibility window, with up to three exam attempts inside it. Use all three unsuccessfully and you wait a year before reapplying for the same certification. Retake mechanics across providers — waiting periods, fees, attempt caps — are their own topic, covered in how certification exam retakes work.

ISC2's timing rule points the other way: it applies after passing. You have nine months to complete endorsement — your application vouched for by an ISC2-certified professional in good standing, or by ISC2 itself with employment verification — before certification is granted.

Is there anything I must do between passing and being certified?

For no-prerequisite providers such as CompTIA, no — pass and you are certified. For ISC2, the endorsement step above is mandatory, and experience claims may be audited within it. For PMI, the vetting happened before the exam, so passing completes the process. Knowing which side of the exam the paperwork sits on stops both varieties of nasty surprise.

A quick self-assessment before you apply

1. Name the gate. Exam-gated (PMI), certification-gated (ISC2), or open (CompTIA)?
2. Pick your path. Degree path or experience path — total your months honestly, converting part-time hours where the provider allows it.
3. Claim your waivers. One degree or credential waiver where offered; CAPM for PMP contact hours.
4. Check the clock. Eligibility windows (PMI: one year) and post-pass deadlines (ISC2 endorsement: nine months).
5. If you fall short, step down, not sideways. An entry credential now beats a rejected application or an unendorsable pass.

Eligibility is the cheap part of certification to get right — it costs an evening with the handbook. The expensive part is readiness, and that is measurable: once you confirm you qualify, work through some free sample questions for your target exam to see how far your experience already carries you, and browse the certification exams directory if you are still choosing between a stretch credential and a stepping stone. For the PMP specifically, the PMP practice questions page is a reasonable first benchmark once your application maths adds up. And note that qualifying is only the entry ticket — every credential here then runs on a renewal cycle, summarised in how long certifications stay valid.