A minimum of five years of information security experience is required to qualify for any FITSP certification. This experience can be in the role of a practitioner, a manager, an instructor, an implementer, an auditor, etc. The candidate must demonstrate the required five years of relevant work experience in the FITSI Certification Application submission and provide two endorsement forms from professional colleagues to validate the stated work experience.
Candidates who successfully pass the certification exam but do not have the required five years of information security experience or cannot validate the experience, will not be granted certification. No refund of examination fee will occur in this case. A denial of certification can be appealed by the candidate.
FITSP candidates are eligible to waive portions of the experience requirements if the candidate possesses other complimentary security certifications or education. Candidates may not waive more than three years of experience in total with any combination of education or certifications. Candidates may waive one year of experience for a bachelor degree and a second year with a master's degree with an IT or information assurance focus. Each degree allows for one year of experience to be waived. Degrees must be issued by a fully accredited institution. Candidates may not waive more than three years of experience with any combination of education and complimentary security certifications.
Candidates are eligible to waive one year of experience by possessing one or more of the following IT security certifications:
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Global Information Assurance Certified (GIAC)
• Certified Ethical Hacker Security+ (CEH)
• System Security Certified Practitioner (SSCP)
• Certified Authorization Professional (CAP)
• Cybersecurity Analyst (CySA+)
• CompTIA Advanced Security Practitioner (CASP+)
FITSP Certification Program candidates will be fairly judged by the FITSI Certification Committee as to their eligibility for certification. Eligibility is determined solely on the criteria established above and will not be influenced by behavior outside of the scope of the requirements and of the certification exam. The eligibility decision will be made by the FITSI Certification Committee who do not participate in the training or on-site evaluation of candidates.