- Identify legal, regulatory, organizational, and industry requirements, including third-party and privacy obligations.
- Architect for GRC by identifying key assets and stakeholders and designing monitoring and reporting.
- Design for auditability and advise on risk treatment.
ISC2 Certification Training Course
ISC2 ISSAP® Information Systems Security Architecture Professional Certification Training Course
Build the security architecture expertise that complex organizations rely on with Accumentum’s ISC2 ISSAP® Information Systems Security Architecture Professional Certification Training Course, developed to help you design security solutions and give management risk-based guidance.
Course focus: Governance, risk, and compliance architecture, security architecture modeling, infrastructure and system security, and identity and access management architecture.
Course Overview
Master the four ISSAP domains.
The ISC2 ISSAP® Information Systems Security Architecture Professional Certification Training Course with Accumentum gives you a complete look at the ISSAP concentration. An ISSAP is a security leader who designs security solutions and gives management risk-based guidance that fits the organization’s vision, mission, strategy, policies, and requirements. This course covers the four domains of the ISSAP exam outline effective August 1, 2025: Governance, Risk, and Compliance, Security Architecture Modeling, Infrastructure and System Security, and Identity and Access Management Architecture. You work through frameworks such as TOGAF and SABSA, threat modeling with STRIDE and CVSS, network, cloud, and operational technology security, cryptographic design, and the full identity lifecycle. You leave ready to sit the ISSAP exam and to architect security across the enterprise.
Course Benefits
Build ISSAP certification readiness and real-world capability.
01
Architecting for GRC
Identify legal, regulatory, and contractual requirements and design for monitoring, auditability, and risk treatment.
02
Security Architecture Modeling
Choose architecture approaches and frameworks, apply threat modeling, and verify and validate designs.
03
Infrastructure and System Security
Architect platform, network, storage, cloud, endpoint, and operational technology security plus cryptographic solutions.
04
IAM Architecture
Architect the identity lifecycle, authentication, authorization, and accounting.
Who Should Attend
- CISSPs working as security architects, enterprise architects, or solution designers.
- Security engineers and consultants who design controls across cloud, hybrid, and on-premises environments.
- Identity and access management leads who design authentication and authorization at scale.
- Experienced cybersecurity professionals seeking the ISC2 ISSAP concentration to prove architecture expertise.
Prerequisites
- Candidates must be a CISSP in good standing and have two years cumulative, full-time experience in one or more of the four domains of the current ISSAP exam outline.
- Or have a minimum of seven years cumulative, full-time experience in two or more of the ISSAP domains. A qualifying degree or an approved credential may satisfy one year, and only one year can be waived.
- Familiarity with network, cloud, and identity architecture concepts.
- Willingness to engage with complex design scenarios in preparation for the ISSAP exam.
Pathway Map
The ISSAP training course spans the four official ISC2 exam domains.
The curriculum covers Governance, Risk, and Compliance (GRC) (21%), Security Architecture Modeling (22%), Infrastructure and System Security (32%), and Identity and Access Management (IAM) Architecture (25%).
Course Content
- Identify the security architecture approach, including scope, types, frameworks such as TOGAF and SABSA, and reference architectures.
- Apply threat modeling frameworks such as STRIDE and CVSS.
- Verify and validate designs through gap analysis, peer review, tabletop exercises, and code review methods.
- Identify infrastructure and system security requirements across deployment models, IT, and operational technology.
- Architect platform, network, storage, data repository, cloud, endpoint, and shared service security.
- Architect cryptographic solutions, including implementation choices and the key management lifecycle.
- Architect the identity lifecycle, from identity verification through provisioning and deprovisioning.
- Architect authentication with protocols such as SAML, RADIUS, Kerberos, and OAuth, and define trust relationships.
- Architect authorization, privileged access management, and identity accounting with audit events and log management.
Course Features
Designed for practical training and ISSAP exam preparation.
Interactive Learning
Participate in training sessions, discussions, and applied exercises with experienced instructors.
Comprehensive Study Materials
Access extensive resources, including e-books, video lectures, and practice exams.
Real-World Applications
Engage in practical exercises and case studies to apply ISSAP concepts.
Certification Preparation
Receive guidance and tips to successfully prepare for the ISC2 ISSAP® Information Systems Security Architecture Professional Certification exam.
Certification Exam
Prepare for the official ISC2 ISSAP certification exam.
ISSAP Exam Readiness
Accumentum’s ISSAP Training Course prepares learners to apply the four ISSAP domains in real work and on exam day.
Upon completing the ISC2 ISSAP® Information Systems Security Architecture Professional Certification Training Course with Accumentum, you will be equipped to pursue the Information Systems Security Architecture Professional (ISSAP) exam. The official exam is 3 hours, includes 125 items in multiple choice and advanced item types format, and requires a passing grade of 700 out of 1000 points. It is offered in English at Pearson VUE testing centers. CISSP-ISSAP is listed in the DoD 8140 Foundational Qualification Matrix V2.1 (effective September 19, 2025), so it can support qualification for applicable DoD cyber workforce roles. Confirm your work role and proficiency level with your supervisor. ISSAP shows that you can design security that fits the business, which supports security architect and enterprise architect roles across government and industry.
Exam Outline
What ISC2 says ISSAP covers.
This is the official ISC2 ISSAP exam outline effective August 1, 2025: 4 domains and 11 objectives, in ISC2's own wording. Our course maps lessons and practice to each one.
Domain 1: Governance, Risk, and Compliance (GRC)
Average weight 21%
- 1.1 Identify legal, regulatory, organizational, and industry requirements
- 1.2 Architecting for governance, risk, and compliance (GRC)
Domain 2: Security Architecture Modeling
Average weight 22%
- 2.1 Identify security architecture approach
- 2.2 Verify and validate design (for example functional acceptance testing, regression)
Domain 3: Infrastructure and System Security Architecture
Average weight 32%
- 3.1 Identify infrastructure and system security requirements
- 3.2 Architect infrastructure and system security
- 3.3 Architect infrastructure and system cryptographic solutions
Domain 4: Identity and Access Management (IAM) Architecture
Average weight 25%
- 4.1 Architect identity lifecycle
- 4.2 Architect identity authentication
- 4.3 Architect identity authorization
- 4.4 Architect identity accounting
Exam Facts
How the ISSAP exam works.
Format
- Length of exam: 3 hours
- Number of items: 125
- Item format: Multiple choice and advanced item types
- Passing grade: 700 out of 1000 points
- Exam language availability: English
Domain weights
- Governance, Risk, and Compliance (GRC), 21%
- Security Architecture Modeling, 22%
- Infrastructure and System Security, 32%
- Identity and Access Management (IAM) Architecture, 25%
Requirements
What ISC2 asks of ISSAP holders.
ISSAP is a CISSP concentration. ISC2 lists the experience requirement as CISSP plus two years, or seven years cumulative.
Once certified, ISC2 requires continuing professional education (CPE) credits and an Annual Maintenance Fee to keep the credential active.
Study Plan
A practical path to ISSAP.
We start with the domain map. ISSAP has 4 domains, and the two heaviest are Infrastructure and System Security (32%), Identity and Access Management (IAM) Architecture (25%). Those get the longest blocks and the most practice questions.
Each domain follows the same pattern. We teach the concepts, walk through a scenario, then work questions in the ISC2 style, where more than one answer looks right and you pick the best one for the situation.
Expect advanced item types as well as multiple choice. We practice those formats so the question style isn't new on test day.
The last stretch is review. You take a full length practice exam under the real time limit, then we go back over the domains where you dropped points.
Career Outlook
Where ISSAP can take you.
ISSAP is for security architects. Titles include security architect, enterprise security architect, chief security architect and senior security consultant.
The U.S. Bureau of Labor Statistics reports that the median annual wage for computer network architects was $134,050 in May 2025. That figure is a national midpoint. Where you live, how long you've been in the field and who you work for all move the number. Source: BLS Occupational Outlook Handbook.
Funding and PathPay
Ways to pay for ISSAP training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're serving, start with your education center and read our Army CA and Air Force COOL pages for the steps.
Paying on your own? ISSAP prep is eligible for PathPay, our monthly payment plan. Terms of 3, 4 and 6 months carry no added fee. 9, 12 and 18 month terms add 5%, 10% and 15%. Course access opens when your first payment clears.
Our funding page has every other option, and you can talk with us or email info@accumentum.net before you enroll.
Frequently Asked Questions
Understand how Accumentum’s ISC2 ISSAP® Information Systems Security Architecture Professional Certification Training Course supports certification preparation, eligibility, course content, delivery, and career advancement.
Information Systems Security Architecture Professional (ISSAP) is an ISC2 concentration. An ISSAP is a security leader who designs security solutions and gives management risk-based guidance that fits the organization’s vision, mission, strategy, policies, and requirements.
CISSPs working as security architects, enterprise architects, or solution designers. Security engineers and consultants who design controls across cloud, hybrid, and on-premises environments. Identity and access management leads who design authentication and authorization at scale. Experienced cybersecurity professionals seeking the ISC2 ISSAP concentration to prove architecture expertise.
Candidates must be a CISSP in good standing and have two years cumulative, full-time experience in one or more of the four domains of the current ISSAP exam outline. Or have a minimum of seven years cumulative, full-time experience in two or more of the ISSAP domains. A qualifying degree or an approved credential may satisfy one year, and only one year can be waived.
The curriculum covers the four official ISSAP domains: Governance, Risk, and Compliance (GRC), Security Architecture Modeling, Infrastructure and System Security, and Identity and Access Management (IAM) Architecture.
Yes. Accumentum’s ISSAP Training Course is designed to prepare you for the official ISC2 ISSAP certification exam and the competencies it assesses.
Yes. Participate in training sessions, discussions, and applied exercises with experienced instructors. Engage in practical exercises and case studies to apply ISSAP concepts.
Access extensive resources, including e-books, video lectures, and practice exams.
Four domains, with weights of 21%, 22%, 32%, and 25% respectively, per the ISC2 ISSAP Certification Exam Outline effective August 1, 2025.
Accumentum is an Army CA and Air Force COOL Approved Vendor for ISC2. Talk with our team to confirm eligibility for your branch and credential before you enroll.
Enroll in the ISC2 ISSAP® Information Systems Security Architecture Professional Certification Training Course with Accumentum via Accumentum’s registration page linked below, or explore PathPay Enrollment options.
ISSAP shows that you can design security that fits the business, which supports security architect and enterprise architect roles across government and industry.
ISC2 lists the exam at 3 hours with 125 items.
ISC2 sets the passing grade at 700 out of 1000 points.
ISC2 publishes these average weights:
- Governance, Risk, and Compliance (GRC), 21%
- Security Architecture Modeling, 22%
- Infrastructure and System Security, 32%
- Identity and Access Management (IAM) Architecture, 25%
Infrastructure and System Security carries the most weight at 32%.
ISSAP is a CISSP concentration. ISC2 lists the experience requirement as CISSP plus two years, or seven years cumulative.
Once certified, ISC2 requires continuing professional education (CPE) credits and an Annual Maintenance Fee to keep the credential active.
Accumentum is an Army CA and Air Force COOL Approved Vendor. Start with your education center, and we'll help with the rest.
Yes. ISSAP prep is eligible for PathPay. Terms of 3, 4 and 6 months add no fee. 9, 12 and 18 month terms add 5%, 10% and 15%.
Enrollment
Enroll in the ISC2 ISSAP® Certification Training Course with Accumentum.
Enroll in the ISC2 ISSAP® Information Systems Security Architecture Professional Certification Training Course with Accumentum to advance your expertise and earn a globally recognized ISC2 concentration. Accumentum is an Army CA and Air Force COOL Approved Vendor, and our team can walk you through funding options before you register.
Advance your cybersecurity career with ISSAP training.
Prepare for the ISC2 ISSAP certification exam and build the governance, risk, and compliance (grc) and identity and access management (iam) architecture skills that employers look for.