ISSEP Certification – New Training Experience, New Exam Outline

[mariatirado]

ISSEP has officially been upgraded. The revised exam outline reflects the latest Job Task Analysis, and the new adaptive training is built to support systems security engineers with targeted, personalized instruction.

The platform adapts to your pace and confidence level, offering immediate feedback and dynamic content. Updated learning materials - including a revised eTextbook and study questions eBook - are now available to support your preparation.

If you specialize in systems security engineering, this is your opportunity to validate your expertise with a credential built for today’s challenges.

Learn more about the ISSEP updates: https://www.isc2.org/insights/2025/08/next-level-certifications-for-cissp 

[ervinfrenzel]

I have already taken and passed both the ISSMP and ISSAP, I self studied for both. I used the ISC2 "adaptive" study material to prep for the ISSEP, I found the material was not even close. I failed my first attempt yesterday, how long has it been since the study materials were updated to how many updates of the exam?. Are there better recommendations for prepping for this one. I have served/worked in the industry since 1989 so I am fairly familiar with most RFC's, NIST SP, etc. I have worked in engineering, direct support, and everything in between.

As this one is such a rarity, not sure if anyone is even monitoring these questions or responses.  Thank you.

[nkeaton]

@ervingrenzel I know on another post noted that the exam objectives changed on August 1. The ISSEP does have an interesting history. I kind of believe that the CGRC rolls into the ISSEP more easily than the CISSP. Of course with the objectives change, I didn’t take the same version of the exam that you did. I earned the ISSEP and ISSMP. I want to achieve the ISSAP but am having issues thinking an architect. I did not have that issue with the other 2. I have a friend that has all 3, so know is possible. Best wishes to both of us.

[ervinfrenzel]

I already passed the ISSAP and ISSMP exams, they weren’t bad. They were kinda enjoyable for me, the ISSEP one was a beast though and it seems the direction was strategically changed (not a bad thing) but the training was a snap not so for the exam.  I completed the official training on Monday.

Ervin Frenzel, PhD
CEI, CCISO, CISSP, E|CSA
(806) 570-7658

[nkeaton]

@ervinfrenzel I really can’t say for sure on the training since would’ve been different exam objectives August 1. I have noticed since I earned my 2 that many have the ISSMP with either an ISSAP and ISSEP but not both. I can tell you with my 2 and studying for the ISSAP that I do have trouble apparently thinking like a security architect. Like a security engineer or manager seemed to make sense. I do know with the ISSEP that my CGRC knowledge was the most helpful in being prepared. We are kind of looking at the same goal but from different perspectives. I will have to look at the ISSEP changes for a better perspective on what the change made. Best wishes.

[ervinfrenzel]

That makes sense as I am both CGRC and CSSLP, so I get where it should be more of the CSSLP - I didn’t see that though. I currently oversee a Tier 1 University undergraduate engineering cyber program - which is why I was looking add this one. Additionally, I have spent close to 10 years as an engineering based worker - which confused me considerably - heck I am even a Department of Labor Information Security Engineering SME and this didn’t touch anything I knew.

Ervin Frenzel, PhD
CEI, CCISO, CISSP, E|CSA
(806) 570-7658

[nkeaton]

@ervinfrenzel   Did you look at the new exam outline that started August 1 to see if better matched the exam that you took than the training?  I only know from my own experience that the ISSAP changed quite a bit.  I am guessing that the ISSEP did too.  We were requested to do JTRs as part of the exam update process a while back.  These changes are probably reflected in the current exams.  That would be very frustrating to study for one exam and be given another.  I track dates pretty closely because of working with our folks on theirs (earning and keeping).  It did not seem to have the "warning" time built in too well compared to other changes.  We knew long before this that some exams are going to be changed to adaptive in October.  Thank goodness these are staying linear for now.    I don't feel as comfortable with adaptive exams.  I will be interested in your journey as help others with things like this and want to learn as much as I can about the process.  At least you have the 30 days to better plan your next step.  I hope that works out for you no matter what you decide.  

[ervinfrenzel]

Actually I did - I felt like it was a bit off even from there.  This is what I wrote on another post to see if it seems "verifiable" for the training, I'm not going to say it was bad, but far too incomplete.

I took it on the 8th of August (2025).  It was no where near the actual training (big disappointment on this one).

I wouldn't rely too heavily on the self paced boot camp (found it not to be helpful at all) - make sure you do the 2nd attempt guarantee though - you'll probably need it.  It is far too high of a level and vague.  I can tell you after the first beast, I have hit over 15 ISO Standards 42010, 42020, 23026, etc., NIST SP 800-160,161, 161r1, 171, 39, 53, 115, 88, 37r1, 37r2, etc., IEEE standards ( https://standards.ieee.org/ieee/15288/10424/) etc., PMI glossaries, and INCOSE SEH (Systems Engineering Handbook).  I am still uncertain if I am ready for this one though.  Not sure how many ISSEP's are out there - but it definitely looks like they are trying to prove they are the smartest persons in the room.

ISO 24765 Glossary is a must read (pay attention to the PMI vocabulary (5th edition), read through the 5th edition PMI handbook - explains better than the INCOSE SEH (but SEH does a better job of tying things together).

Overall, this was more of what I expected for the ISSMP exam not the ISSEP exam. The ISSMP wasn't bad, but this one was a beast.  Overall, basically be a Project Management Officer - with a tech background - and that should get your foot across the threshold - not necessarily all the way through the door but at least an entry to the exam.

Good Luck

[nkeaton]

@ervinfrenzel I am guessing that timing may be your biggest issue with studying for one exam and taking another with the August 1. I am not sure of the changes to the ISSEP but do know of the changes to the ISSAP that went from 6 domains to 4. I have not mapped those changes. I will try to find the latest ISC2 numbers, but the ISSAP plus the ISSEP numbers were close to the same number as total ISSMPs. I have trouble thinking like an architect but apparently not as an engineer or a manager. I do know that passing the CGRC first probably had a lot to do with my passing the ISSEP. I would suggest looking at what your score report said on the domains to help you make a better decision for next steps. Best wishes.

[ervinfrenzel]

Nancy,

Actually, I also passed the CGRC, and CSSLP previously with no problems.  I would definitely say passing the CGRC would really prepare you more for the ISSMP, while the CSSLP would more than likely prepare you for the ISSEP.  Just from the developmental lines and how the content plays into it.  Additionally, I do know that I dug enough into study material so that I now know where much of the content I encountered came from.  I'm have now read the source material and kept reading - I didn't realize how much of it came from PMP (older edition) versus how much of it came from ISO and outside sources.  Like I said previouslyl, I had attended the self-paced content - I just found the official ISSEP official study questions - I'll do those as well. 

Where do we actually find the numbers for how many of each there actually are? I'm curious as I am trying my damndest to finish out all 10 of the active certs. I carry the HCISPP as well as 8 other ISC2 certs - I really would like to knock them all out so that I can eventually teach the content.