ISC2 Information Systems Security Engineering Professional (ISSEP)
ISSEP Exam Domains (2025/2026 Outline)
1. Systems Security Engineering Foundations (24%) SSE fundamentals, technical management, acquisition processes, and designing trusted systems/networks.
2. Risk Management (20%) Aligning security risk with enterprise risk, managing risks to specific systems, and operational risk management.
3. Security Planning and Engineering (22%) Stakeholder requirements, architectural views, system requirements baseline, and design validation.
4. Systems Security Implementation, Verification, and Validation (20%) Integration of security solutions, testing (V&V), and supporting ongoing activities like DevSecOps/CI/CD.
5. Secure Operations, Change Management, and Disposal (14%) Continuous monitoring,
incident response support, secure maintenance, and decommissioning procedures.
incident response support, secure maintenance, and decommissioning procedures.
