Who Is It For?
To be eligible for this CISSP concentration, you must first have a valid CISSP certification, along with two years of cumulative paid job experience in one or more of the five CBK domains. This designation is suitable for those who have had or are currently serving the following roles: Senior Security Analyst, Systems Engineer, Information Assurance Systems Engineer, Officer, and Analyst.
Key Notes before Taking Official Validation
Before you take this exam, make sure to review the (ISC)² exam procedures and (ISC)² Candidate Information Bulletin for details on the testing process, which are available on their official website. Also, go over the exam outline to understand the domains that will be tested, so that you can sufficiently prepare for them. Finally, if you want to reschedule or cancel your exam, please contact Pearson VUE either online or by phone at least one day before the main exam. You will be charged a reschedule fee of USD 50 and a cancellation fee of USD 100.
ISC2 ISSEP Exam Syllabus Topics:
| Topic | Details |
|---|---|
Systems Security Engineering Foundations - 25% | |
| Apply systems security engineering fundamentals | - Understand systems security engineering trust concepts and hierarchies - Identify the relationships between systems and security engineering processes - Apply structural security design principles |
| Execute systems security engineering processes | - Identify organizational security authority - Identify system security policy elements - Integrate design concepts (e.g., open, proprietary, modular) |
| Integrate with applicable system development methodology | - Integrate security tasks and activities - Verify security requirements throughout the process - Integrate software assurance method |
| Perform technical management | - Perform project planning processes - Perform project assessment and control processes - Perform decision management processes - Perform risk management processes - Perform configuration management processes - Perform information management processes - Perform measurement processes - Perform Quality Assurance (QA) processes - Identify opportunities for security process automation |
| Participate in the acquisition process | - Prepare security requirements for acquisitions - Participate in selection process - Participate in Supply Chain Risk Management (SCRM) - Participate in the development and review of contractual documentation |
| Design Trusted Systems and Networks (TSN) | |
Risk Management - 14% | |
| Apply security risk management principles | - Align security risk management with Enterprise Risk Management (ERM) - Integrate risk management throughout the lifecycle |
| Address risk to system | - Establish risk context - Identify system security risks - Perform risk analysis - Perform risk evaluation - Recommend risk treatment options - Document risk findings and decisions |
| Manage risk to operations | - Determine stakeholder risk tolerance - Identify remediation needs and other system changes - Determine risk treatment options - Assess proposed risk treatment options - Recommend risk treatment options |
Security Planning and Design - 30% | |
| Analyze organizational and operational environment | - Capture stakeholder requirements - Identify relevant constraints and assumptions - Assess and document threats - Determine system protection needs - Develop Security Test Plans (STP) |
| Apply system security principles | - Incorporate resiliency methods to address threats - Apply defense-in-depth concepts - Identify fail-safe defaults - Reduce Single Points of Failure (SPOF) - Incorporate least privilege concept - Understand economy of mechanism - Understand Separation of Duties (SoD) concept |
| Develop system requirements | - Develop system security context - Identify functions within the system and security Concept of Operations (CONOPS) - Document system security requirements baseline - Analyze system security requirements |
| Create system security architecture and design | - Develop functional analysis and allocation - Maintain traceability between specified design and system requirements - Develop system security design components - Perform trade-off studies - Assess protection effectiveness |
Systems Implementation, Verification and Validation - 14% | |
| Implement, integrate and deploy security solutions | - Perform system security implementation and integration - Perform system security deployment activities |
| Verify and validate security solutions | - Perform system security verification - Perform security validation to demonstrate security controls meet stakeholder security requirements |
Secure Operations, Change Management and Disposal - 17% | |
| Develop secure operations strategy | - Specify requirements for personnel conducting operations - Contribute to the continuous communication with stakeholders for security relevant aspects of the system |
| Participate in secure operations | - Develop continuous monitoring solutions and processes - Support the Incident Response (IR) process - Develop secure maintenance strategy |
| Participate in change management | - Participate in change reviews - Determine change impact - Perform verification and validation of changes - Update risk assessment documentation |
| Participate in the disposal process | - Identify disposal security requirements - Develop secure disposal strategy - Develop decommissioning and disposal procedures - Audit results of the decommissioning and disposal process |
ISC2 CISSP-ISSEP Exam Certification Details:
| Duration | 180 mins |
| Sample Questions | ISC2 CISSP-ISSEP Sample Questions |
| Exam Code | CISSP-ISSEP |
| Schedule Exam | Pearson VUE |
| Passing Score | 700/1000 |
| Number of Questions | 125 |
| Exam Price | $599 (USD) |
| Exam Name | ISC2 Information Systems Security Engineering Professional (CISSP-ISSEP) |
1158 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
