Possess a minimum of five years of direct full-time security work experience in two or more of the (ISC)² information security domains (CBK). One year may be waived for having either a four-year college degree, a master's degree in Information Security, or for possessing one of a number of other certifications. A candidate without five years of experience may earn the Associate of (ISC)² designation bypassing the required CISSP examination, valid for a maximum of six years. During those six years, a candidate will need to obtain the required experience and submit the required endorsement form for certification as a CISSP. Upon completion of the professional experience requirements, the certification will be converted to CISSP status.