Exam Registration

To register for this test, create your Pearson VUE account. Note that Pearson VUE is the worldwide exclusive administrator for all (ISC)² exams. After your account is created, choose the CISSP-ISSEP certification exam from the list of the options offered. You can now choose a timeslot and testing location to schedule your test.

Test Outline

In the CISSP-ISSEP exam, you can expect questions that cover the following five CISSP-ISSEP CBK domains:

• Secure Operations, Change Management, and Disposal (17%)

  This part tests your abilities with developing secure operations strategy, change management, and the disposal process.

• Security Planning and Design (30%)

  This domain covers skills such as understanding stakeholder requirements, identifying and addressing document threats, developing system requirements, and producing system security architecture and design.

• Systems Security Engineering Foundations (25%)

  Under such a topic, you will learn to apply and execute concepts of systems security engineering for security processes and design, integrating with relevant system development methods, technical management, performing acquisition processes, and designing Trusted Systems and Networks (TSN).

• Risk Management (14%)

  Here, you need to be proficient with applying security risk management principles, including Enterprise Risk Management (ERM), identifying system security risks, carrying out risk analysis and evaluation, documenting risk decisions, and suggesting risk treatment options.

• Systems Implementation, Verification, and Validation (14%)

  This domain details how to implement and integrate system security solutions, along with verifying and validating them.

Apart from preparing for exam-related domains, candidates are advised to pay attention to areas of study that need additional focus. They can supplement these areas by referring to the relevant references provided on the official (ISC)² site.

The CISSP or Certified Information Systems Security Professional certification exam validates your ability to design, implement, and manage a cybersecurity program and is offered by (ISC)². Overall, there are three CISSP concentration tests, each focusing on a specific sub-area within the broad information covered by the common CISSP. These concentrations include the Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP), and Information Systems Security Management Professional (ISSMP). This article, in particular, covers important information about the CISSP-ISSEP specialization including an overview of the certification and its associated exam, top training and study guides for exam preparation, and other key points.