ISC2 · Full exam outline
ISSEP
Information Systems Security Engineering Professional
Security engineering leadership5 domains · 17 subdomains
1
Systems Security Engineering Foundations
25%1.1Security engineering principles and frameworks
1.2Stakeholder requirements and concept of operations
1.3Systems engineering lifecycle processes
1.4Trust and assurance concepts
2
Risk Management
14%2.1Risk management framework in an engineering context
2.2Threat and vulnerability analysis
2.3Risk treatment within the system design
3
Security Planning and Design
30%3.1Security requirements definition and allocation
3.2Architecture and design decisions
3.3Protection needs and control selection
3.4Design trade-off analysis
4
Systems Implementation, Verification and Validation
14%4.1Implementation and integration of security controls
4.2Verification and validation activities
4.3Security assessment and test evidence
5
Secure Operations, Change Management and Disposal
17%5.1Secure operations and sustainment
5.2Change and configuration management
5.3Disposal and decommissioning
Weights are the certification body’s published values and are checked against each outline revision.