Information Systems Security Engineering Professional

ISSEP

The Information Systems Security Engineering Professional (ISSEP) certification is designed for information systems security professionals who are planning, developing, implementing, integrating, operating, and maintaining information systems and their security controls.

Focus

The Information Systems Security Engineering Professional certification focuses on Information Systems Security Engineering

Exam Duration

The Information Systems Security Engineering Professional exam duration is 210 minutes

Num of Question

The exam contains a total of 105

Exam Fee

The exam fee is 435 USD.

Exam Validity

The CCRN-Pediatric certification is valid for 3 years.

Prior Certification

• CEH, CISSP, IAM, CIWS, CISM or CAP

Exam Format

The Information Systems Security Engineering Professional exam is a Online proctored exam

Passing Conditions

To pass Information Systems Security Engineering Professional exam, applicants must achieve a minimum score of Pass 70% of questions to pass

Who Should Take

Information security professionals, system engineers, and architects who work on designing, implementing, and managing security requirements for IT systems and organizational security programs.

• cybersecurity engineer
• IS security engineer
• security architect
• system engineer

Prerequisites

N/A

Or can substitute with certifications:

• ISC2 Certified Information Systems Security Professional (CISSP)
• Health Information Trust Alliance (HITRUST) Certified Chief Information Security Officer (HCISO)

Certification Process

• Step 1: Meet the prerequisites (education and experience)
• Step 2: Pass the ISSEP exam

Domains with Weights

• Planning and Designing Security Requirements (22%): This domain includes activities such as planning, designing, and determining the security requirements of an organization or system. It involves developing and implementing processes to identify, analyze, and document security requirements and controls for an information system.
• Applying and Enforcing Security Requirements (21%): This domain includes activities such as implementing, operating, and maintaining an information system and its associated security controls to meet security requirements. It includes tasks such as security process implementation, system maintenance, and ongoing security management and monitoring.
• Developing and Implementing Cybersecurity Controls (21%): This domain includes activities such as specifying, designing, and implementing security controls, as well as integrating information system security into the overall organizational security program. It involves tasks such as defining security requirements, developing and implementing security strategies, and performing risk assessments.
• Managing and Overseeing Information Systems Security (20%): This domain includes activities such as managing and overseeing information systems security to meet organizational security policies and security requirements. It involves tasks such as leading cybersecurity teams, managing cybersecurity program functions, and ensuring that all security activities meet regulatory requirements.
• Managing Security Policy and Oversight (16%): This domain includes activities such as implementing and maintaining organizational security policies, procedures, and standards to manage the security of information systems. It also includes tasks such as establishing and maintaining security standards, guidelines, and procedures across the organization, and ensuring compliance with regulatory requirements.
• Maintaining Security in Support of Organizational Mission ( %): This domain includes activities such as ensuring that security is integrated into the overall business strategy of the organization. It involves tasks such as identifying security measures that support the corporate vision, understanding organizational policies on security, and making sure that security controls support organizational goals.