- Apply systems security engineering fundamentals, including trust concepts, engineering process relationships, and structural security design principles (e.g., NIST engineering framework, ISO 27001).
- Execute systems security engineering processes across hardware, software, and data, including organizational authorities, governance and compliance, and design concepts.
- Integrate security tasks, verification, and assurance methods with system development methodologies (e.g., SDLC, ISO/IEC 24641:2023, model-based systems engineering).
- Perform technical management activities such as project, configuration, information, measurement, and quality assurance processes, and evaluate security process automation solutions.
- Participate in technology procurement management, including acquisition security requirements, selection, supply chain risk management (SCRM), and contractual deliverable review.
- Conduct resource analysis including cost estimation, personnel costs, and reliability metrics (e.g., Monte Carlo, MTBF, MTD, MTTF, MTTR).
ISC2 Certification Training Course
ISC2 ISSEP® Information Systems Security Engineering Professional Certification Training Course
Build systems security engineering expertise with Accumentum’s ISC2 ISSEP® Information Systems Security Engineering Professional Certification Training Course, developed to help you incorporate security into projects, applications, business processes, and information systems.
Course focus: Systems security engineering foundations, risk management, security planning and engineering, systems security implementation, verification and validation, and secure operations, change management, and disposal.
Course Overview
Master the five ISSEP domains of systems security engineering.
The ISC2 ISSEP® Information Systems Security Engineering Professional Certification Training Course with Accumentum provides a comprehensive exploration of the Information Systems Security Engineering Professional (ISSEP) concentration, emphasizing the practical application of systems engineering principles and processes to develop secure systems. Developed in conjunction with the U.S. National Security Agency (NSA), ISSEP recognizes the ability to analyze organizational needs, define security requirements, design security architectures, develop secure designs, implement system security, and support system security assessment and authorization for government and industry. Designed for senior systems engineers, information assurance engineers, and security analysts, this course covers the five domains of the current ISSEP Common Body of Knowledge (CBK®): Systems Security Engineering Foundations, Risk Management. Security Planning and Engineering. Systems Security Implementation, Verification and Validation. And Secure Operations, Change Management and Disposal. Participants gain an in-depth understanding of integrating security throughout the system lifecycle, managing technical procurement and risk, and engineering resilient security solutions aligned with ISC2 methodologies. The course prepares learners for the ISSEP certification exam while empowering them to strengthen secure system design and operations across the enterprise.
Course Objectives
Build ISSEP certification readiness and systems security engineering capability.
01
Systems Security Engineering Foundations
Apply systems security engineering fundamentals, execute engineering processes, integrate with system development methodologies, and participate in technical and procurement management.
02
Security Risk Management
Align security risk management with enterprise risk management and manage risk to systems and operations throughout the lifecycle.
03
Security Planning and Engineering
Analyze environments, apply system security principles, develop system security requirements, and create validated system security designs.
04
Implementation Through Disposal
Implement and verify security solutions, support secure operations and change management, and participate in secure decommissioning and disposal.
Who Should Attend
- Senior Systems Engineers responsible for incorporating security into system design and development.
- Information Assurance Systems Engineers and Information Assurance Officers supporting secure systems engineering.
- Information Assurance Analysts and Senior Security Analysts focused on security requirements, architecture, and validation.
- Experienced cybersecurity professionals seeking the ISC2 ISSEP concentration to demonstrate elite systems security engineering expertise.
Prerequisites
- Candidates must be a CISSP in good standing and have two years’ cumulative, full-time experience in one or more of the five domains of the current ISSEP outline, or have a minimum of seven years’ cumulative, full-time experience in two or more of the ISSEP domains (as required by ISC2).
- Familiarity with systems engineering concepts, security architecture, and risk management practices to support advanced course topics.
- Prior exposure to secure design, requirements engineering, or system security assessment and authorization activities.
- Willingness to engage with complex technical and engineering concepts in preparation for the ISSEP certification exam.
Pathway Map
The ISSEP training course spans the five official ISC2 exam domains.
The curriculum covers Systems Security Engineering Foundations (24%), Risk Management (20%), Security Planning and Engineering (22%), Systems Security Implementation, Verification and Validation (20%), and Secure Operations, Change Management and Disposal (14%), aligned to the ISC2 ISSEP Exam Outline effective August 1, 2025.
Course Content
- Apply security risk management principles aligned with enterprise risk management and integrated throughout the lifecycle.
- Manage risk to the system: establish risk context, identify threats, events, vulnerabilities, and impact, and perform inherent risk analysis and evaluation.
- Monitor and evaluate changes to risk posture (residual, changed, new) and document findings and decisions.
- Manage risk to operations using the same risk context, identification, analysis, evaluation, monitoring, and documentation practices.
- Analyze the organizational and operational environment: capture stakeholder requirements, roles and responsibilities, constraints and assumptions, and prepare a security validation plan.
- Apply system security principles including resiliency, layered security (defense-in-depth, Zero Trust, secure-by-default), fail-safe defaults, least privilege, economy of mechanism, separation of interfaces/functions/services/roles, automation, software assurance, and data security.
- Develop system requirements: security context, functions within the system and security concept of operations, requirements baseline, and requirements analysis.
- Create system security design through functional analysis and allocation, design components, requirements traceability, trade-off studies, and design validation.
- Implement and integrate security solutions and support ongoing system security activities such as Continuous Integration/Continuous Delivery (CI/CD) and DevSecOps.
- Verify successful implementation by developing security test plans and supporting system security verification.
- Review and update risk analysis based on implementation results.
- Document stakeholder acceptance in system implementation.
- Develop a secure operations plan, including roles, responsibilities, and requirements for system security personnel and security-related event reporting.
- Support secure operations through continuous monitoring design, incident response support, and secure maintenance procedures.
- Participate in change management: change reviews, impact assessment, verification and validation of changes, and updated risk assessment documentation.
- Participate in the disposal process: identify disposal security requirements. Develop secure disposal and decommissioning procedures, audit disposal results. And implement data retention policies.
Course Features
Designed for practical systems security engineering training and ISSEP exam preparation.
Interactive Learning
Participate in training sessions, discussions, and applied exercises with experienced instructors.
Comprehensive Study Materials
Access extensive resources, including e-books, video lectures, and practice exams.
Real-World Applications
Engage in practical exercises and case studies to apply systems security engineering concepts.
Certification Preparation
Receive guidance and tips to successfully prepare for the ISC2 ISSEP® Information Systems Security Engineering Professional certification exam.
Certification Exam
Prepare for the official ISC2 ISSEP certification exam.
ISSEP Exam Readiness
Accumentum’s ISSEP Training Course prepares learners to apply systems engineering principles to develop, implement, and sustain secure systems.
Upon completing the ISC2 ISSEP® Information Systems Security Engineering Professional Certification Training Course with Accumentum, you will be equipped to pursue the Information Systems Security Engineering Professional (ISSEP) exam. The official exam is 3 hours, includes 125 multiple-choice items, and requires a passing grade of 700 out of 1000 points (English, Pearson VUE). This concentration affirms your ability to incorporate security into projects, applications, business processes, and information systems. Earning ISSEP elevates your career trajectory for advanced systems security engineering and information assurance roles across government and industry.
Exam Outline
What ISC2 says ISSEP covers.
This is the official ISC2 ISSEP exam outline effective August 1, 2025: 5 domains and 19 objectives, in ISC2's own wording. Our course maps lessons and practice to each one.
Domain 1: Systems Security Engineering Foundations
Average weight 24%
- 1.1 Apply systems security engineering fundamentals
- 1.2 Execute systems security engineering processes (for example hardware, software, data)
- 1.3 Integrate with system development methodology
- 1.4 Perform technical management
- 1.5 Participate in the technology procurement management
- 1.6 Resource Analysis (for example Cost estimation, personnel costs, probabilities and statistics (Monte Carlo))
Domain 2: Risk Management
Average weight 20%
- 2.1 Apply security risk management principles
- 2.2 Manage risk to system
- 2.3 Manage risk to operations
Domain 3: Security Planning and Engineering
Average weight 22%
- 3.1 Analyze organizational and operational environment
- 3.2 Apply system security principles
- 3.3 Develop system requirements
- 3.4 Create system security design
Domain 4: Systems Security Implementation, Verification and Validation
Average weight 20%
- 4.1 Implement and integrate security solutions
- 4.2 Verify successful implementation
Domain 5: Secure Operations, Change Management and Disposal
Average weight 14%
- 5.1 Develop secure operations plan
- 5.2 Support secure operations
- 5.3 Participate in change management
- 5.4 Participate in the disposal process
Exam Facts
How the ISSEP exam works.
Format
- Length of exam: 3 hours
- Number of items: 125
- Item format: Multiple choice and advanced item types
- Passing grade: 700 out of 1000 points
- Exam language availability: English
Domain weights
- Systems Security Engineering Foundations, 24%
- Risk Management, 20%
- Security Planning and Engineering, 22%
- Systems Security Implementation, Verification, and Validation, 20%
- Secure Operations, Change Management and Disposal, 14%
Requirements
What ISC2 asks of ISSEP holders.
ISSEP is a CISSP concentration. ISC2 lists the experience requirement as CISSP plus two years, or seven years cumulative.
Once certified, ISC2 requires continuing professional education (CPE) credits and an Annual Maintenance Fee to keep the credential active.
Study Plan
A practical path to ISSEP.
We start with the domain map. ISSEP has 5 domains, and the heaviest is Systems Security Engineering Foundations (24%). It gets the longest blocks and the most practice questions.
Each domain follows the same pattern. We teach the concepts, walk through a scenario, then work questions in the ISC2 style, where more than one answer looks right and you pick the best one for the situation.
Expect advanced item types as well as multiple choice. We practice those formats so the question style isn't new on test day.
The last stretch is review. You take a full length practice exam under the real time limit, then we go back over the domains where you dropped points.
Career Outlook
Where ISSEP can take you.
ISSEP is built for systems security engineering, and much of the demand comes from government and defense programs. Titles include systems security engineer, ISSE, information assurance engineer and security architect.
Per the U.S. Bureau of Labor Statistics, information security analysts earned a median annual wage of $129,180 in May 2025. BLS also projects employment of information security analysts to grow 21 percent from 2025 to 2035, much faster than the average for all occupations. Treat it as a reference point and not a promise. Location, experience and the employer drive what any one person earns. Source: BLS Occupational Outlook Handbook.
Funding and PathPay
Ways to pay for ISSEP training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're serving, start with your education center and read our Army CA and Air Force COOL pages for the steps.
Paying on your own? ISSEP prep is eligible for PathPay, our monthly payment plan. Terms of 3, 4 and 6 months carry no added fee. 9, 12 and 18 month terms add 5%, 10% and 15%. Course access opens when your first payment clears.
Our funding page has every other option, and you can talk with us or email info@accumentum.net before you enroll.
Frequently Asked Questions
Understand how Accumentum’s ISC2 ISSEP® Information Systems Security Engineering Professional Certification Training Course supports certification preparation, eligibility, course content, delivery, and career advancement.
The Information Systems Security Engineering Professional (ISSEP) is an ISC2 concentration for security leaders who specialize in applying systems engineering principles and processes to develop secure systems. It was developed in conjunction with the U.S. National Security Agency (NSA) and covers five domains in the current exam outline.
Senior Systems Engineers, Information Assurance Systems Engineers, Information Assurance Officers, Information Assurance Analysts, Senior Security Analysts, and other experienced professionals seeking to prove systems security engineering expertise.
ISC2 requires CISSP in good standing plus two years’ cumulative full-time experience in one or more ISSEP domains, or a minimum of seven years’ cumulative full-time experience in two or more ISSEP domains. A qualifying degree or additional approved credential may satisfy one year of experience.
The curriculum covers the five official ISSEP domains: Systems Security Engineering Foundations, Risk Management. Security Planning and Engineering. Systems Security Implementation, Verification and Validation. And Secure Operations, Change Management and Disposal.
Yes. Accumentum’s ISSEP Training Course is designed to prepare you for the official ISC2 ISSEP certification exam and the systems security engineering competencies it assesses.
Yes. Participate in training sessions, discussions, and applied exercises with experienced instructors. Engage in practical exercises and case studies to apply systems security engineering concepts.
Access extensive resources, including e-books, video lectures, and practice exams.
Five domains, with weights of 24%, 20%, 22%, 20%, and 14% respectively, per the ISC2 ISSEP Certification Exam Outline effective August 1, 2025.
Enroll in the ISC2 ISSEP® Information Systems Security Engineering Professional Certification Training Course with Accumentum via Accumentum’s registration page linked below, or explore PathPay Enrollment options.
ISSEP demonstrates elite systems security engineering knowledge, opens doors to advanced career paths, and helps you stand out as a subject matter expert in secure systems design, implementation, and operations.
ISC2 lists the exam at 3 hours with 125 items.
ISC2 sets the passing grade at 700 out of 1000 points.
ISC2 publishes these average weights:
- Systems Security Engineering Foundations, 24%
- Risk Management, 20%
- Security Planning and Engineering, 22%
- Systems Security Implementation, Verification, and Validation, 20%
- Secure Operations, Change Management and Disposal, 14%
Systems Security Engineering Foundations carries the most weight at 24%.
ISSEP is a CISSP concentration. ISC2 lists the experience requirement as CISSP plus two years, or seven years cumulative.
Once certified, ISC2 requires continuing professional education (CPE) credits and an Annual Maintenance Fee to keep the credential active.
Accumentum is an Army CA and Air Force COOL Approved Vendor. Start with your education center, and we'll help with the rest.
Yes. ISSEP prep is eligible for PathPay. Terms of 3, 4 and 6 months add no fee, and longer terms add 5% to 15%.
Enrollment
Enroll in the ISC2 ISSEP® Certification Training Course with Accumentum.
Enroll in the ISC2 ISSEP® Information Systems Security Engineering Professional Certification Training Course with Accumentum to advance your expertise in systems security engineering and earn a globally recognized ISC2 concentration. This course is your pathway to becoming an Information Systems Security Engineering Professional (ISSEP). For detailed information and to secure your spot, visit Accumentum's registration page linked below.
Advance your cybersecurity career with ISSEP systems security engineering training.
Prepare for the ISC2 ISSEP certification exam, master systems security engineering foundations and risk management, and build the planning, implementation, and secure operations skills that critical systems require.