The concentrations (ISSAP, ISSEP, ISSMP) require a valid CISSP, which itself requires 5 years of experience, and 2 years of experience in one of the covered domains.
Do the 2 years of experience have to be AS a CISSP? In other words, could someone with 5 years of experience in security engineering become a CISSP and as soon as their membership is confirmed, then take the ISSEP exam and receive that certification as well?
Thanks!