Endorsement · Understand
CISSP endorsement: the observed processing time and the stages of the application
Across the nine usable timelines from candidates between 2023 and 2026, CISSP endorsement was approved between three and six and a half weeks after the application was submitted, most often within four to six weeks — which matches the range ISC2 states. The documented delays almost all come from the candidate: application submitted too late, endorser who forgets to confirm.
Expect three to six and a half weeks after the application is submitted, most often four to six: that is what the nine usable timelines published by candidates between 2023 and 2026 show. The wait is nonetheless described as the most trying part of the journey, precisely because it is passive — one candidate calls the process brutal, "especially when it's just radio silence during the whole process". The official rules for the process are set out on isc2.org.
What are the stages between passing and actual certification?
The typical sequence, reconstructed from the complete accounts:
- Provisional pass on the exam ("provisionally passed"), handed to you on paper at the Pearson VUE centre — the document is described in our article on exam day.
- Application submission: resume-style details and career timeline, plus the endorser's information where applicable.
- Endorser confirmation, when there is one.
- Processing by ISC2: the long phase, often silent.
- Approval email, or approval visible on the portal with no notification.
- Payment of the Annual Maintenance Fee.
- Activation of the certification, sometimes deferred to the start of the following month.
The most complete account runs through the first four stages in a single day:
"Provisionally passed the exam on September 1st. As mentally exhausted as I was, I immediately filled out the requested resume details and included my endorser info. Endorser confirmed within an hour, and everything was submitted to ISC2 before the end of the business day. […] Zero news from ISC2 until I received the Congratulations email 3 weeks later. Paid my Annual Maintenance Fee within an hour."
How long does endorsement actually take?
Nine timelines are usable in the accounts. Here they are as reported.
| Exam passed | Application submitted | Approval | Time after submission |
|---|---|---|---|
| 1 Sept 2023 | same day | around 22 Sept 2023 | about 3 weeks |
| July 2023 | July 2023 | 29 Aug 2023 | about 5 to 6 weeks |
| 31 July 2024 | 1 Aug 2024 | 27 Aug 2024 | about 4 weeks |
| 21 Oct 2024 | 15 Nov 2024 | 19 Dec 2024 | about 5 weeks |
| 20 Dec 2024 | around 20 Dec 2024 | 3–4 Feb 2025 | about 6.5 weeks, with a request for information |
| 20 Dec 2024 | 23 Dec 2024 | 1 Feb 2025 | about 6 weeks |
| 28 Dec 2024 | same day | pending at the time of the message | internal update: "6 weeks out" |
| 27 Feb 2025 | 3 Mar 2025 | 4 Apr 2025 | about 4.5 weeks |
| 31 Jan 2026 | not stated | 3 Mar 2026 | about 4.5 weeks end to end |
How to read this table: three to six and a half weeks after submission, with a clear cluster between four and six weeks, across nine cases spread over three years.
This matches what ISC2 states, according to one member: "Based on ISC2 email it should be 4-6 weeks".
The mechanism described is that of a queue: "once they get to it it will be done within the day unless there's a problem, in which case they'll be quick to contact you".
Who can endorse a candidate, and what if you have no endorser?
The endorser is an ISC2 member who attests to your experience. Their part of the process can be very quick — "Endorser confirmed within an hour" — and is never the limiting factor.
Above all, not having one is not a blocker. To the question "Did you have to put someone with CISSP to vouch for you? What if you didn't have one?", the thread's answer is that ISC2 then endorses directly, with no effect on the wait:
"Whatever the case timeline is still the same unfortunately."
For an isolated candidate or a career changer, chasing an endorser at all costs therefore wastes weeks with no benefit to the timeline.
Which mistakes cost the most weeks?
The two delays documented in the accounts come from the candidate or their endorser, never from ISC2.
Mistake no. 1: waiting while you look for an endorser.
"I passed the exam few months ago but didn't submit the application right away like I should have because I was trying to reach out to my past co-workers to ask them to endorse.....This lead to my application submission being dragged out needlessly an additional month and a half. […] Please don't make the same mistake as me and get this started asap!"
Mistake no. 2: not chasing an endorser who forgets. The same thread documents a three and a half week gap between the exam and the actual submission for that reason alone:
"I passed the test Oct 21st and sent it to my endorser. Realized they didn't submit it and reached back out reminding them. So it was officially submitted Nov 15th and was approved Dec 19th."
In both cases, ISC2's processing stayed within the usual range: it is the weeks before submission that were lost. Hence the unanimous advice in the accounts — fill in the application the same day, and check that the endorser has confirmed.
What happens if ISC2 asks for additional information?
It is not a rejection, and the candidates' accounts show it twice over.
One candidate receives a request for clarification during processing: "ICS2 came back asking for a bit more information of my career timelines on the 17th Jan 2025". Application approved two and a half weeks later — this is the six and a half week timeline in the table, the longest in the sample.
Another describes a more thorough review: "Then got the audit review message. That was a buzzkill while on the other side of the world." Here too, the outcome was favourable.
No outright rejection appears in these accounts — rejected candidates rarely post — and appeal procedures are a matter for ISC2.
How do you know the application has been approved?
By going and looking for yourself. Notification is not systematic:
"my endorsement application was finally approved two days ago 8/29 (make sure you check now and then, because I was not sent a notification)"
Some do receive a congratulations email, others do not. It is therefore better to check the member portal periodically than to wait for a message that may never come. Silence during processing is normal and means nothing either way: one candidate describes "zero news from ISC2" right up to approval.
What should you do immediately after approval?
Four actions stand out in the accounts, in this order.
Pay the annual fee. It is what closes the process: "fully endorsed on 1st Feb after payment of AMF". The fastest candidate in the accounts paid it within the hour of the email. The amount, the increases and the payment pitfalls are detailed in the ISC2 AMF and the annual cost of maintaining the certification.
Check that the credential is active before relying on it. Approval does not mean immediate activation:
"just an FYI your credential won't be live until the start of the next month. check the portal before you rely on the credential for anything."
Collect the digital credentials. One candidate downloaded the digital certificate and added the Credly badge to his LinkedIn profile. Worth noting: neither a physical certificate nor a welcome kit appears in the accounts.
Start earning CPE credits straight away. The maintenance cycle begins with the certification — and not before, which makes any training taken during the wait unusable: 120 CPE in three years, how it works. "Don't get complacent. Start working on CPE early and often", or, more tongue-in-cheek, "Now you get to enjoy the thrills of never-ending CPE acquisition!".
To prepare the content of the application, see the experience required for the CISSP; if the experience is not complete, see Associate of ISC2 status. Where these accounts come from is detailed in our method.
Frequently asked questions
How long does CISSP endorsement take?
Three to six and a half weeks after the application is submitted, most often four to six weeks, across nine candidate timelines between 2023 and 2026 — the range ISC2 itself gives in an email, according to one candidate.
What should you do if you do not know a CISSP who can endorse your application?
Submit the application without waiting: ISC2 can act as endorser directly, and one member confirms that the timeline stays the same in that case. Hunting for an endorser for weeks only delays processing.
Do you get an email when the application is approved?
Not always. One candidate discovered his approval by checking the portal and notes that he received no notification. Several accounts describe complete silence throughout processing.
Does a request for additional information mean a rejection?
Not in the documented cases. One candidate who was asked about his career timeline saw his application approved two and a half weeks later; another received an in-depth review message followed by an approval.
Is the certification active as soon as it is approved?
Not necessarily. One member warns that the credential may only go live at the start of the following month and advises checking the portal before relying on it. Payment of the annual fee closes the process.
Where does this information come from?
This article draws on the public reports of several thousand candidates, published over the last three years (24 July 2023 to 24 July 2026) and synthesised topic by topic. Quoted extracts are anonymised. Our method in detail.
- CISSP experience requirements: five years, two domains, one waiverFive years across at least two CBK domains, one year of waiver at most: the ISC2 experience requirement and the backgrounds candidates got approved.
- Associate of ISC2: the status of those who passed the exam without the experiencePassing the CISSP exam without the five years of experience leads to Associate of ISC2 status: duration, real value and what you are allowed to write.