Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by ISC
Exam Format
180 min
125
700 out of 1000
Advanced/Specialist
Registration
$599 USD
Pearson VUE or online proctoring
English
CISSP-ISSEP Exam Topics and Domains
CISSP-ISSEP is organized into 5 weighted domains. Expect to work with NIST RMF, SIEM, Agile, Burp Suite, and more.
1
Systems Security Engineering Foundations
24%
Systems Security Engineering Fundamentals
Security Engineering Trust ConceptsSecurity Engineering Processes
- Understand systems security engineering trust concepts and hierarchies
- Explain relationships between systems and security engineering processes
- Apply structural security design principles
Design Concepts and Governance
Organizational Security AuthoritiesDesign Concepts
- Identify organizational security authorities
- Ensure system security governance and compliance
- Select appropriate design concepts
Technical and Procurement Management
Technical ManagementTechnology Procurement Management
- Manage technical aspects of security engineering
- Integrate security into procurement processes
- Assess vendor security capabilities
2
Risk Management
20%
Security Risk Management Principles
Risk Assessment MethodologiesThreat Modeling
- Apply security risk management principles
- Conduct comprehensive threat assessments
- Develop risk mitigation strategies
Risk Management for Systems and Operations
Vulnerability AnalysisRisk Mitigation Strategies
- Implement risk management for operational systems
- Develop vulnerability management programs
- Create risk treatment plans
Risk Documentation and Monitoring
Risk Context and AnalysisRisk Documentation and Monitoring
- Document risk context and analysis
- Establish risk monitoring programs
- Create risk communication strategies
3
Security Planning and Engineering
22%
Organizational Environment Analysis
Business Process AnalysisSecurity Requirements Gathering
- Analyze organizational environment
- Identify business security needs
- Define security requirements
System Security Principles
Security Architecture PrinciplesSecurity Controls Selection
- Apply system security principles
- Design security architectures
- Select appropriate security controls
System Requirements and Design
System Requirements DevelopmentSystem Security Design Creation
- Develop system security requirements
- Create comprehensive security designs
- Document design decisions
4
Systems Security Implementation, Verification, and Validation
20%
Security Solution Implementation
Implementation PlanningSecurity Control Implementation
- Plan security implementations
- Deploy security solutions
- Manage implementation projects
Security Verification
Testing MethodologiesVerification Processes
- Conduct security verification
- Implement testing programs
- Document verification results
Validation and Authorization
Validation ProcessesSystem Authorization
- Validate system security
- Support authorization processes
- Document compliance
5
Secure Operations, Change Management and Disposal
14%
Secure Operations Planning
Security Personnel RolesSecurity Event Reporting
- Plan secure operations
- Define operational procedures
- Establish reporting mechanisms
Continuous Monitoring
Monitoring DesignMonitoring Implementation
- Design continuous monitoring functionality
- Implement monitoring programs
- Measure security effectiveness
Change Management and Disposal
Change Management ProcessesSystem Disposal Procedures
- Participate in change management
- Implement secure disposal procedures
- Ensure compliance throughout lifecycle
How do I earn this certification?
Passing CISSP-ISSEP earns the ISSEP certification. It sits in the Security Engineering track.
Alternative Paths
- CISSP - Certified Information Systems Security ProfessionalBroad security knowledge foundation
- CGRC - Certified in Governance, Risk, and ComplianceRisk management focus
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for CISSP-ISSEP is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2020-11-01
Updates
- Zero Trust Architecture NIST SP 800-207 Increased emphasis in Security Planning domain • Release date: 2020-08-01
- DevSecOps Integration DoD Enterprise DevSecOps Reference Design Integration throughout system lifecycle domains • Release date: 2023-01-01
- Cloud Security Engineering FedRAMP Rev 5 Cloud controls in implementation domain • Release date: 2022-06-01
- AI/ML Security NIST AI RMF 1.0 Emerging topic in risk management domain • Release date: 2023-01-26
Who should take this exam?
This exam is typically taken by Senior Systems Engineer and Information Assurance Systems Engineer.
- Option 1: CISSP certification in good standing + 2 years experience in ISSEP domains
- Option 2: 7 years cumulative experience in two or more ISSEP domains
- Bachelor's or Master's degree can waive 1 year of experience
- Additional ISC2 credential can waive 1 year of experience