Overview of the Information Systems Security Engineering Professional Exam
The ISSEP certification targets information systems security engineers and security architects tasked with integrating technical security requirements into the systems engineering lifecycle. Candidates must demonstrate proficiency in applying the NIST Systems Security Engineering Capability Maturity Model, ISO/IEC 15288, and Common Criteria (ISO/IEC 15408) to complex enterprise environments. The curriculum mandates deep technical knowledge regarding FIPS 140-3 cryptographic standards, secure SDLC methodologies, and high-assurance security architectures. Professionals are evaluated on their ability to perform quantitative risk assessments, manage hardware-software assurance, and implement advanced access control models, identity management frameworks, and cryptographic protocols within distributed cloud-native and legacy network infrastructures.