What Is ISSAP?

Overview

ISSAP: Information Systems Security Architecture Professional is a ISC2 credential. Prepare for the ISC2 ISSAP concentration covering security architecture, infrastructure, IAM, and GRC across four exam domains. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISC2 exam. ISC2 sets exam content, fees, and policies.

Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISC2 exam. ISC2 sets exam content, fees, and policies.

Who it is for

• CISSPs working as security architects, enterprise architects, or solution designers.
• Security engineers and consultants who design controls across cloud, hybrid, and on-premises environments.
• Identity and access management leads who design authentication and authorization at scale.

Exam domains

Weights follow the official outline.

1. 01

   Governance, Risk, and Compliance (GRC)

   Identify legal, regulatory, organizational, and industry requirements, including third-party and privacy obligations, Architect for GRC by identifying key assets and stakeholders and designing monitoring and reporting, and Design for auditability and advise on risk treatment.

2. 02

   Security Architecture Modeling

   Identify the security architecture approach, including scope, types, frameworks such as TOGAF and SABSA, and reference architectures, Apply threat modeling frameworks such as STRIDE and CVSS, and Verify and validate designs through gap analysis, peer review, tabletop exercises, and code review methods.

3. 03

   Infrastructure and System Security

   Identify infrastructure and system security requirements across deployment models, IT, and operational technology, Architect platform, network, storage, data repository, cloud, endpoint, and shared service security, and Architect cryptographic solutions, including implementation choices and the key management lifecycle.

4. 04

   Identity and Access Management (IAM) Architecture

   Architect the identity lifecycle, from identity verification through provisioning and deprovisioning, Architect authentication with protocols such as SAML, RADIUS, Kerberos, and OAuth, and define trust relationships, and Architect authorization, privileged access management, and identity accounting with audit events and log management.

Exam format and cost

Questions

Confirm on the vendor site

Duration

Confirm on the vendor site

Format

Multiple choice and related item types (confirm on the vendor outline)

Passing score

Confirm the passing score on the vendor site

Cost

Confirm the current exam fee on the vendor site before you register

Delivery

Pearson VUE test center or online where the vendor offers it

Languages

Confirm available languages on the vendor site

Experience and eligibility

Candidates must be a CISSP in good standing and have two years cumulative, full-time experience in one or more of the four domains of the current ISSAP exam outline. Or have a minimum of seven years cumulative, full-time experience in two or more of the ISSAP domains. A qualifying degree or an approved credential may satisfy one year, and only one year can be waived.

Renewal

Renewal rules for ISSAP: Information Systems Security Architecture Professional are set by ISC2. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.

Roles this credential fits

• Governance, risk, and compliance architecture, security architecture modeling, infrastructure and system security, and identity and access management architecture.
• Security Architecture
• Teams standardizing on this credential for hiring or compliance

Official sources

• ISC2 certifications

Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.