CISSP-ISSAP Certified Information Systems Security Architecture Professional
Go beyond the CISSP and challenge yourself in the field of information security architecture
(ISC)² offers a number of additional certifications known as CISSP concentrations that build on the CISSP Certification. These are optional certifications for CISSPs who wish to improve their subject matter mastery. The CISSP Concentrations recognize your evolving expertise in information security architecture, engineering or management.
The CISSP-ISSAP is an appropriate credential if you’re a chief security architect or analyst. As a CISSP-ISSAP, you prove your expertise developing, designing and analyzing security solutions. You also excel at giving risk-based guidance to senior management in order to meet organizational goals.
About the exam
The exam is an MCQ with 125 questions based on the following 6 areas of skills:
- Identity and Access Management Architecture (19%)
- Security Operations Architecture (17%)
- Infrastructure Security (19%)
- Architect for Governance, Compliance, and Risk Management (16%)
- Security Architecture Modeling (14%)
- Architect for Application Security (15%)
- Candidates have 3 hours to take this exam in a Pearson Vue testing center.
(ISC)² recommends candidates review their exam policies and procedures prior to registering for the examination.
Prerequisites
To qualify for the CISSP-ISSAP, you must be CISSP certified in good standing and have two years cumulative, paid, full-time work experience in one or more of the six domains of the CISSP-ISSAP Common Body of Knowledge (CBK).
Recommended Training
| CISSP-ISSAP | CISSP-ISSAP Certification Preparation |
Download the CISSP-ISSAP Exam Outline
Recertification
Once you have passed your CISSP-ISSAP exam and are certified, you need to recertify every three years by:
- Earning 20 continuing professional education (CPE) credits each year. (You may apply these 20 credits toward your CISSP CPE requirement as long as these credits are specific to security architecture.)
- Paying an Annual Maintenance Fee (AMF), in addition to the fee required for the CISSP.
