From Zero to CISSP: The Cybersecurity Certification Path (CC, Security+, SSCP, CISSP)
The best CISSP certification path for most people is CC, then Security+, then SSCP, then CISSP. ISC2 CC needs no work experience. SSCP needs one year. CISSP needs five years in at least two of its eight domains. Each step builds the knowledge for the next one, and Security+ or SSCP can cut one year from the CISSP experience requirement.
Read more
Step 1: CC – Certified in Cybersecurity
ISC2 says CC needs no work experience. It covers security principles, access control, network and cloud security concepts, and security operations. It is a good first step for students, career changers and IT staff. Practise with our CC practice exam.
Step 2: CompTIA Security+
CompTIA recommends Network+ and two years in a security or systems administrator role, but this is not a hard rule. Security+ is on the ISC2 approved list, so it can satisfy one year of CISSP experience. Note that Security+ V8 is expected around November 17, 2026. Prepare with our Security+ practice exam.
Step 3: SSCP
The SSCP needs one year of full-time experience in one or more of its seven domains. A degree in computer science or IT can satisfy that year. SSCP is also on the CISSP waiver list. Try our SSCP practice exam.
Step 4: CISSP
The CISSP needs five years of cumulative, full-time work in two or more of the eight domains. A relevant degree or one credential from the ISC2 list can satisfy one year, but not both. Part-time work and internships can count too. Get ready with our CISSP practice exam.
No experience yet? Become an Associate of ISC2
You can pass SSCP or CISSP before you have the experience. You then become an Associate of ISC2. You get two years to earn the one year for SSCP, and six years to earn the five years for CISSP.
Why this order works
The path moves from foundations to hands-on work and then to management of a whole security program. CC and Security+ help you land a first security role. SSCP proves practical skills in that role. CISSP then shows you can design and lead security across a company. Each job you hold on the way adds to the five years ISC2 asks for.
Optional branches
| Branch | Certification | On the CISSP waiver list? |
|---|---|---|
| Cloud | AWS Security Specialty | Yes |
| Network | CCNP Security | Yes |
| Analyst | CompTIA CySA+ | Yes |
Pick one branch that fits your job. Remember that the waiver gives only one year, even if you hold several listed credentials.
Start your path today
Practise each step with realistic questions. Our $1 trial is deducted when you upgrade, and every plan has a 14-day money-back guarantee.
