ISAAP Questions

[Jreg]

Quick question about this.

For the experience requirement, is it in addition to the CISSP requirement. In other words, do I have to hold the CISSP for 2 years and meet the domain requirements before I can sit for the ISSAP, or if I have 2 cumulative years of ISSAP qualified experience pre CISSP, does that count? All that I can find is that you have to have 2 cumulative years of experience within the domains.

Also, I don't have any formal Architect training although I do have what amounts to the real world experience. I've considered taking some TOGAF training but I also came across SABSA today and am wondering what formal training would most closely align with the ISAAP exam content.

Any thoughts?

Thanks!

[dcontesti]

Please check this site out:

https://www.isc2.org/Certifications/CISSP-Concentrations

[AlecTrevelyan]

---

@Jreg wrote:

Quick question about this.

For the experience requirement, is it in addition to the CISSP requirement. In other words, do I have to hold the CISSP for 2 years and meet the domain requirements before I can sit for the ISSAP, or if I have 2 cumulative years of ISSAP qualified experience pre CISSP, does that count? All that I can find is that you have to have 2 cumulative years of experience within the domains.

---

It doesn't matter if your experience was earned before you were CISSP certified, or even if it's some of the same experience you submitted to qualify for your CISSP.

Also, I don't have any formal Architect training although I do have what amounts to the real world experience. I've considered taking some TOGAF training but I also came across SABSA today and am wondering what formal training would most closely align with the ISAAP exam content.

---

TOGAF is generic Enterprise Architecture, whereas SABSA is pure Enterprise Security Architecture so it will be better aligned. In fact the SABSA bible is still one of the suggested references for ISSAP study:

https://www.isc2.org/certifications/References#accordion-204b5a1dc3534ba2b24f703df5e067ea

I'm in no way advocating this as I have heard mixed reviews, however, I'd imagine the training that most closely aligns with the ISSAP exam content is ISC2's own ISSAP training:

https://enroll.isc2.org/product?catalog=ISSAP-SPT-GLOBAL-2020

Good luck!

[Terminator]

The CISSP-ISSAP CBK is a good reference and even the link suggested at the end of each chapter should be read. I took and passed the exam at the end of September and the exam is really experience based. If you have the experience in the field, the exam is not so hard to take. I had doubts on few questions. Hope this helps. Take note that since 14th of October 2020, the exam content/domain percentage changed a bit.