In order to qualify for the CISSP certification, you must pass the exam and have at least five years of paid work experience in two or more of the eight domains ISC² CISSP CBK which are: Security and Risk Management; Asset Security; Security Architecture and Network Security; Identity and Access Management (IAM); Security Assessment and Testing; Security Operations; and Software Development Security.