In addition to passing the exam, candidates must also adhere to the ISC² Code of Ethics and submit proof of professional experience. The experience requirement is five years in at least two of the eight domains, though a candidate may be eligible for a one-year waiver if they hold a four-year college degree or another qualifying credential.