How to Check Certification Eligibility Requirements

The only place to confirm you are eligible for a certification exam is the certification body's own website — usually a page labelled "requirements", "eligibility" or the exam's handbook PDF. Blog posts, forums and training-provider adverts routinely quote outdated rules, and the consequences of relying on them range from a rejected application to a revoked credential. This article walks through where the official information lives, how to read it without misinterpreting it, and what happens after you submit an application, including audits.

It is worth checking even for exams famous for being open to everyone. Requirements change: the Project Management Professional (PMP) exam itself changed on 9 July 2026 when the Project Management Institute (PMI) introduced a revised Exam Content Outline, and PMI's announcement mentioned expanded eligibility pathways — exactly the kind of detail a two-year-old blog post will get wrong.

Step 1: Find the official eligibility page, not a summary of it

Every legitimate certification body publishes its requirements directly. Start from the provider's certification page and look for these specific documents:

1. The certification overview page. For example, PMI's PMP page at pmi.org lists the eligibility paths before you can register. ISC2's CISSP page states its experience requirement — five years of cumulative paid work across its domains — right on the certification page.
2. The exam guide or candidate handbook. Amazon Web Services (AWS) publishes an exam guide PDF for each certification; CompTIA publishes exam objectives for each code. These documents state prerequisites (or the absence of them) in the provider's own words.
3. The exam objectives page. Even where there is no formal gate, the objectives page usually names a recommended profile — CompTIA recommends 12 months of hands-on IT support experience for A+ (220-1201/220-1202), and AWS aims Cloud Practitioner (CLF-C02) at people with up to around six months of AWS exposure. Recommendations are not requirements, and the official page is the only place that reliably distinguishes the two.

If a search result takes you to a training company's summary instead, use it only to find the official link. Confirm the exam code while you are there: A+ is now 220-1201/220-1202, Security+ is SY0-701 as of August 2026, and pages describing older codes are describing retired requirements.

Step 2: Learn to read a requirements page correctly

Eligibility pages use a small vocabulary that trips people up. Four distinctions matter most.

"Required" versus "recommended"

CompTIA's A+ and Security+ pages, AWS's certification pages and Microsoft's AZ-900 page all list experience recommendations with no enforced prerequisite — anyone can register. ISC2's CISSP, by contrast, requires five years of experience. If the wording says "recommended", "ideal candidate" or "typically has", it is guidance. If it says "must", "required" or appears inside an application you have to complete, it is a gate. Our overview of how certification requirements work in general covers the categories in more depth.

"Either/or" eligibility paths

Many programmes offer alternative routes, and candidates often read only the first. PMI's PMP has two classic paths: a four-year degree with 36 months of project leadership experience, or a secondary diploma with 60 months — both alongside 35 contact hours of project management education (a Certified Associate in Project Management, CAPM, satisfies the education element). Failing the first path does not mean you are ineligible; check every path listed, and confirm current details on pmi.org, since PMI has signalled expanded pathways under the 2026 outline.

Experience windows and counting rules

Experience requirements usually specify when the experience must have occurred and what counts. PMI's Portfolio Management Professional (PfMP), for example, requires experience within the last 15 years, and the PMI Construction Professional (PMI-CP) counts experience within the last 10. Job titles rarely matter — leading projects counts toward PMP experience whether or not "project manager" was ever on your business card. Read the provider's definition of qualifying experience before deciding you fall short. If experience is your main question, see our detailed guide to certifications that require work experience.

Alternatives when you miss a requirement

Some bodies offer a bridge: ISC2 lets candidates without the full five years take the CISSP exam and become an Associate of ISC2 while they accrue experience (confirm the current mechanics on isc2.org). ISACA's Certified Information Systems Auditor (CISA) lets you sit the exam first and apply for certification within five years of passing, demonstrating experience at application time. Missing a requirement today is not always a dead end.

Step 3: Understand the application and verification process

How providers verify eligibility varies enormously, and knowing which model applies tells you how much paperwork to prepare.

1. No application — registration is the only step. CompTIA, AWS and Microsoft fundamentals exams have no eligibility application; you book and sit the exam.
2. Application reviewed before exam authorisation. PMI requires an application documenting your experience and education before you can schedule the PMP. Once approved, eligibility windows apply — PMI grants a one-year eligibility period with up to three exam attempts. ISACA gives CISA registrants a six-month eligibility window from registration.
3. Panel review. PMI's Program Management Professional (PgMP) and PfMP add a panel review of your documented experience before you are cleared to test — expect your written experience summaries to be evaluated, not just counted.
4. Post-exam endorsement or application. ISC2 certifications involve endorsement after passing, and ISACA's certification application (with a US$50 processing fee for CISA) comes after the exam.

When documenting experience, write it before you start the application: list each project or role, dates, hours or months, and what you personally led or delivered. Providers ask for exactly this structure, and drafting it in advance is the difference between a 40-minute application and a stalled one.