Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by ISC
Exam Format
3 hr
700 out of 1000
Advanced
Registration
$599 USD
Pearson VUE or online proctoring
English
Validity
3 years
Earn 60 CPE credits over 3-year cycle; 20 CPE credits required annually; No additional AMF for CISSP holders
CISSP-ISSAP Exam Topics and Domains
CISSP-ISSAP is organized into 4 weighted domains. Expect to work with Access control systems, Active Directory, AWS, AWS Direct Connect, and more.
1
Governance, Risk, and Compliance (GRC)
21%
Legal and Regulatory Requirements
Regulatory RequirementsLegislative Requirements
- Determine regulatory and legislative requirements for security architecture
- Design for auditability and compliance monitoring
- Implement segregation of duties and high assurance systems
Risk Management
Risk AssessmentRisk Treatment
- Develop risk-based security architecture decisions
- Align security controls with business risk appetite
- Design compensating controls for residual risks
Security Governance
Governance Frameworks
- Establish security governance structures
- Define security architecture governance processes
- Implement security metrics and KPIs
2
Security Architecture Modeling
22%
Architecture Frameworks
Enterprise Architecture FrameworksSecurity Architecture Patterns
- Apply enterprise architecture frameworks to security design
- Develop security architecture patterns and blueprints
- Create architecture decision records
Threat Modeling
Threat Modeling FrameworksVulnerability Assessment
- Conduct comprehensive threat modeling exercises
- Integrate threat intelligence into architecture design
- Design countermeasures based on threat analysis
Security Requirements Engineering
Requirements Gathering
- Derive security requirements from business objectives
- Document security architecture requirements
- Validate requirements against threat models
3
Infrastructure and System Security Architecture
32%
Deployment Models
On-Premises ArchitectureCloud-Based ArchitectureHybrid Architecture
- Design secure deployment architectures
- Select appropriate deployment models based on requirements
- Implement security controls for different deployment scenarios
Network Security Architecture
Network SegmentationSecure Communications
- Design secure network architectures
- Implement network segmentation strategies
- Configure secure communication channels
IT and Operational Technology
OT/ICS SecurityIoT Security
- Design security for OT environments
- Implement IoT security architectures
- Address IT/OT convergence challenges
Physical Security
Physical Access Controls
- Design physical security controls
- Integrate physical and logical security
- Plan for environmental threats
4
Identity and Access Management (IAM) Architecture
25%
Identity Lifecycle Management
Identity Establishment and VerificationIdentity Provisioning and De-provisioning
- Design identity lifecycle processes
- Implement automated provisioning workflows
- Establish identity governance frameworks
Authentication and Authorization
Authentication MethodsAuthorization Models
- Design authentication architectures
- Implement authorization strategies
- Configure adaptive authentication
Federation and SSO
Federation ProtocolsSingle Sign-On
- Design federation architectures
- Implement SSO solutions
- Manage federated identities
Privileged Access Management
PAM Architecture
- Design PAM solutions
- Implement privileged session management
- Configure privilege elevation workflows
How do I earn this certification?
Passing CISSP-ISSAP earns the ISSAP certification. It sits in the Security Architecture track.
Current Level Exams
Next Level Options
- CISSP-ISSAP+ISSEP - Dual Specialization
- CISSP-ISSAP+ISSMP - Architecture + Management
Alternative Paths
- CCSP - Certified Cloud Security ProfessionalCloud architecture specialization
- CSSLP - Certified Secure Software Lifecycle ProfessionalApplication security architecture
- AWS-SAP - AWS Solutions Architect Professional Cloud-specific architecture skills
- TOGAF - The Open Group Architecture Framework Enterprise architecture methodology
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for CISSP-ISSAP.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-08-01
- Announcement date: 2024-08-21
Updates
- Zero Trust Architecture NIST SP 800-207 Heavily integrated into Domain 2 and 4 • Release date: 2024-01-01
- Cloud Security CSA Guidance v5 Significant focus in Domain 3 • Release date: 2024-03-01
- AI/ML Security Emerging New considerations in threat modeling • Release date: 2024-06-01
Who should take this exam?
This exam is typically taken by Chief Security Architects and Security Analysts.
- CISSP certification in good standing with 2 years additional experience
- OR 7 years cumulative experience in security architecture domains without CISSP