ISC2 · Full exam outline
ISSAP
Information Systems Security Architecture Professional
Security architecture leadership6 domains · 20 subdomains
1
Architect for Governance, Compliance and Risk Management
17%1.1Determine legal, regulatory and privacy requirements
1.2Architect for organizational governance
1.3Risk management architecture
2
Security Architecture Modeling
15%2.1Identify the security architecture approach and frameworks
2.2Verify and validate the design against reference models
3
Infrastructure Security Architecture
21%3.1Network and communications architecture
3.2Cryptographic architecture and key management
3.3Physical and environmental security
3.4Secure operations architecture for infrastructure
4
Identity and Access Management Architecture
16%4.1Identity management and provisioning architecture
4.2Authentication and credential management
4.3Authorization and access control models
4.4Federation and single sign-on
5
Architect for Application Security
13%5.1Integrate security into the development lifecycle
5.2Application security controls and testing
5.3Secure interfaces, APIs and data flows
6
Security Operations Architecture
18%6.1Monitoring, logging and detection architecture
6.2Incident response architecture
6.3Continuity and recovery architecture
6.4Change and configuration management
Weights are the certification body’s published values and are checked against each outline revision.