ISC2 - ISSEP - Information Systems Security Engineering Professional

[jacob-kraniak]

[Certification] ISSEP - Information Systems Security Engineering Professional

Status: Backlog / In Progress / Studying / Completed
Target Completion: [YYYY-MM or QX 2026]
Priority: High / Medium

Overview

Advanced ISC2 concentration (developed with NSA) on applying systems engineering principles to build and maintain secure systems throughout the lifecycle.

Official Page: https://www.isc2.org/certifications/issep
Exam Outline (2025): https://www.isc2.org/certifications/issep/issep-certification-exam-outline

Prerequisites / Experience

• CISSP in good standing + 2 years in 1+ domains OR
• 7 years cumulative experience in 2+ domains

Exam Details

• Duration: 3 hours
• Questions: 125 (multiple choice + advanced item types)
• Price: ~$599 USD
• Passing Score: 700 out of 1000
• Format: Computer-based at Pearson VUE

Domains & Study Checklist (2025 weights)

• Domain 1: Systems Security Engineering Foundations (24%) — Fundamentals, processes, procurement.
• Domain 2: Risk Management (20%) — System and operational risk.
• Domain 3: Security Planning and Engineering (22%) — Requirements, design, principles.
• Domain 4: Systems Security Implementation, Verification and Validation (~20%) — Integration, testing.
• Domain 5: Secure Operations, Change Management and Disposal (14%) — Operations, changes, decommissioning.

Resources & Study Plan

• Official ISC2 Self-Paced Training
• Ultimate Guide + Flash Cards
• NIST systems engineering / secure SDLC resources
• [Add your resources here]

Milestones / Tasks

• Study + engineering process application
• Practice exams (target 80%+)
• Schedule & pass exam
• Claim badge + update board / LinkedIn / resume

Additional Labels: isc2, advanced, engineering