topic Re: ISSAP and ISSEP in ISSAP Study Group

ISSAP and ISSEP

Action1 — Tue, 13 Sep 2022 18:02:47 GMT

Is it worth earning both the ISSAP and ISSEP? I know this is subjective but wanted to get my fellow security professional opinions on if it is worth having both certifications.

Re: ISSAP and ISSEP

gidyn — Wed, 14 Sep 2022 06:04:42 GMT

Neither are likely to help you get a job unless it's specifically required, e.g. DoD. Otherwise, you're lucky to find a potential employer who knows what they are.

As far as learning is concerned, ISSAP is good for a high level overview of "classic" security architecture, it's less relevant if you're concerned with securely running code on public PaaS. ISSEP is focused on formally approved procedures for designing security solutions.

Re: ISSAP and ISSEP

CDNI — Mon, 19 Sep 2022 12:09:07 GMT

Personally, I think it is a good learning opportunity. However, CISSP remains the gold standard credential and anytime I trawl Linkedin etc for opportunities, the CISSP concentrations rarely get called out as required.

Conversely, I've seen entry level roles looking for CISSP !

If you've got the interest in pursuing it - go for it and tell us how you found it !

_______
CDNI

Re: ISSAP and ISSEP

Action1 — Tue, 20 Sep 2022 12:49:08 GMT

Thanks for the response @CDNI and I do not disagree. I know that CISSP gets you in the door and is the standard. I'm looking at it from an even more advanced career field. I've been working as a security engineer and I think there is expectation that security engineers should also be able to implement security architect designs, which I think just depends on the organization and what they expect from the role.

Re: ISSAP and ISSEP

BBT — Thu, 27 Oct 2022 21:27:28 GMT

Since your focus is Security Engineering, combining CISSP, CSSLP, and ISSEP should be good enough for personal development.

Re: ISSAP and ISSEP

Action1 — Fri, 28 Oct 2022 02:26:10 GMT

@BBT Thank you for the response and you gave me something to think about. I see that the CBK for the CSSLP is from 2013. Do you know if there are any plans for ISC2 to produce an updated CBK? Again, thank you.

Re: ISSAP and ISSEP

tswern — Fri, 28 Oct 2022 12:40:02 GMT

For CSSLP, there are courses on linkedinlearning and pluralsight.

Re: ISSAP and ISSEP

Action1 — Fri, 28 Oct 2022 13:18:54 GMT

Thank you @tswern. I always get a little worried when the CBK is out of date and there is no official ISC2 official self-paced course. There are also no classroom or instructor-led courses offered for the CSSLP. I did look at the exam outline and it does kind of make sense for me to pursue it. I will definitely have to give it some thought.