Information Systems Security Architecture Professional
Information Systems Security Architecture Professional is an independent information security certification concentration of the CISSP governed by the International Information Systems Security Certification Consortium (commonly known as (ISC)2).
For experienced information security professionals with an International Information Systems Security Certification Consortium ((ISC)2) CISSP credential in good standing, the (ISC)2 ISSAP Concentration demonstrates acquired rigorous knowledge of select Common Body of Knowledge (CBK) domains in Security Architecture. As of June 30, 2009, (ISC)2 has reported certifying 848 ISSAPs in 40 countries.[1]
Certification subject matter
This concentration is an appropriate credential for Chief Security Architects and Analysts who may typically work as independent consultants or in similar capacities. The architect plays a key role within the information security department with responsibilities that functionally fit between the C-suite and upper managerial level and the implementation of the security program. He/she would generally develop, design, or analyze the overall security plan. Although this role may typically be tied closely to technology this is not necessarily the case, and is fundamentally the consultative and analytical process of information security.
ISSAP domains
The major domains of the CBK covered by ISSAP certification are:
- Access Control Systems and Methodology
- Cryptography
- Physical Security Considerations
- Security Architecture Analysis
- Technology Related Business Continuity Planning (BCP) & Disaster Recovery Planning
- Communications & Network Security
Requirements
According to the (ISC)2 Information Systems Security Architecture Professional (ISSAP) Candidate Information Bulletin, candidates for the ISSAP must meet the following requirements:
- Be a CISSP in good standing
- Demonstrate two years of professional experience in systems security architecture
- Pass the ISSAP exam with a scaled score of 700 or better. The exam is multiple choice, consisting of 125 questions with four options each, to be answered over a period of three hours.
- Maintain the ISSAP credential in addition to the underlying CISSP
- Adhering to the (ISC)2 Code of Ethics [2].
Specialized concentrations
Passing a concentration examination demonstrates proven capabilities and subject-matter expertise beyond that required for the CISSP or SSCP credentials. Other current concentrations for CISSPs include the:
For all concentrations an official (ISC)2 training is available.[3] The CISSP-ISSAP CBK Review Seminar was developed by a Dutch company named CIBIT.
References
- ^ "ISSAP Member Counts". Retrieved 2009-06-30.
- ^ "(ISC)2 Code of Ethics". ISC2. Retrieved 2008-12-03.
- ^ https://www.isc2.org/concentrations.aspx