What is the CISSP-ISSEP? Information Systems Security Engineering Professional [updated 2021]

The International Information Security Certification Consortium, or ISC2, provides several renowned standardized information security certifications for IT professionals.

Suppose you already hold the CISSP certification and want to build on your expertise in information security engineering. In that case, you might want to consider the CISSP-ISSEP, a concentration certification exam that validates knowledge and provides an opportunity to prove your ability in applying security engineering principles into the business processes you support.

Earn your CISSP, guaranteed!

Get live, expert CISSP training from anywhere. Enroll now to claim your Exam Pass Guarantee!

Get Pricing

What is the ISSEP?

The ISSEP is one of the three CISSP concentration certification exams. It was developed in conjunction with the U.S. National Security Agency (NSA) to recognize those who specialize in the practical application of systems engineering principles and processes to build secure systems.

This concentration proves someone has an elite level of knowledge and expertise in providing satisfactory security controls to meet current information protection needs and the ability to incorporate security in all aspects of business operations.

Who should earn the ISSEP?

According to ISC2, the ISSEP is ideal for those working in roles such as:

• Senior systems engineers
• Information assurance system engineers
• Information assurance officers
• Information assurance analysts
• Senior security analysts

To sit for the ISSEP examination, you need to have a minimum of two years of experience in engineering and have valid CISSP credentials. One seeking to take the ISSEP exam does not have to have any specific job titles above. Still, practical system engineering experience with a focus on developing highly secure systems is required. The applicant will need to design a robust security architecture, assess organizational security needs, define security requirements and adequately perform security risk assessments.

To schedule an exam, you must first create an account at Pearson VUE; at that point, you’re ready to register and pay for the exam ($599/EUR 555/GBP 479).

CISSP concentrations do not require an endorser when filling out the online application. If candidates already hold an ISC2 certification, they will not have to pay an additional annual maintenance fee (AMF) of $125. Part of the renewal requirements for those holding the designation is meeting a certain amount of CPE credits (20) annually and throughout the three years. 

What are the ISSEP domains?

The five domains of the ISSEP common body of knowledge (CBK) are as follows: 

Domain 1: Systems security engineering foundations – 25%

• Apply systems security engineering fundamentals
• Execute systems security engineering processes
• Integrate with applicable system development methodology
• Perform technical management
• Participate in the acquisition process
• Design trusted systems and networks

Domain 2: Risk management – 14%

• Apply security risk management principles
•  Address risk to the system
• Manage risk to operations

Domain 3: Security planning and design – 30%

• Analyze the organizational and operational environment
• Apply systems security principles
• Develop system requirements
• Create system security architecture and design

Domain 4: Systems implementation, verification and validation – 14%

• Implement, integrate and deploy security solutions
• Verify and validate security solutions

Domain 5: Secure operations, change management and disposal – 17%

• Develop secure operations strategy
• Participate in secure operations
• Participate in change management
• Participate in the disposal process

The CISSP-ISSEP exam outline covers the domains, weights and subdomains on which you will be tested; the official document has been updated to describe the topics accurately. The certification exam was last updated in November 2020 and now reflects the most pertinent issues that cybersecurity engineering professionals currently face with the content refreshed.

The exam suits those who hold the CISSP designation and have experience, skills or knowledge to do the following:

• Understand and apply information system security engineering processes as the information system security engineer on the systems engineering team.
• Analyze system security risk throughout the system development lifecycle within the context of system operations and organizational risk tolerance.
• Analyze, design, develop and evaluate the security design and architecture for systems using security engineering processes and principles.
• Develop system solutions that employ security functions and provide adequate protection to system functions.
• Choose the most effective security configurations and designs to ensure system security during operations, change management and disposal.

What does the ISSEP exam involve? 

The ISSEP is a three-hour exam that consists of 125 multiple-choice questions (100 operational and 25 pre-test items) and requires 700 out of 1,000 points to pass.

The refreshed CISSP-ISSEP exam went into effect on Nov. 13, 2020, and is available in English only.

What are the best ISSEP study resources?

From traditional textbooks and study guides to interactive flashcards and study apps, ISC2, Inc. offers training and study resources:

• Official ISC2 CISSP-ISSEP course
• Official ISSEP flashcards
• Official ISC2 CBK training seminar for the ISSEP

However, you should also review all other options available on the web from reputable training providers to find the best options for your learning style and needs. Training providers who offer ISSEP prep courses can help you get ready and successfully pass your exam. Prep courses can offer dives into the broad spectrum of topics included in the CBK, addressing new threats, technologies, regulations, standards and practices. But also have options to fill any other knowledge gaps you might want to address.

For many, the best approach seems to be using multiple types of study aids and focusing on how the test is structured and the types of vocabulary used.

Earn your CISSP, guaranteed!

Get live, expert CISSP training from anywhere. Enroll now to claim your Exam Pass Guarantee!

Get Pricing

Obtaining your ISSEP certification

The ISSEP is one of the CISSP concentrations that tests the security capabilities of system engineers with over two years of experience. The CISSP-ISSEP can help achieve an even higher level of success and possibly higher wages; the average salary is $149,992 per PayScale, although this will vary significantly depending on geographic location, specific job duties and years of experience. The ISSEP is a great addition to any system engineer’s resume.

Sources: 

• The Ultimate Guide to the CISSP-ISSEP, ISC2, Inc.
• Domain Change FAQs for CISSP-ISSEP, ISC2, Inc.
• CISSP-ISSEP Domain Refresh guide, ISC2, Inc.
• Get to Know the CISSP-ISSEP, ISC2, Inc.
• CISSP-ISSEP Exam Outline, ISC2, Inc.
• ISC2 Self-Study Resources, ISC2, Inc.
• CISSP Concentrations, ISC2, Inc.
• Frequently Asked Questions, ISC2, Inc.
• Salary for Certification: ISSEP/CISSP, PayScale, Inc.
• What You Need To Know About ISC2 Exams, ISC2, Inc.