ISSEP Certification – New Training Experience, New Exam Outline

[mariatirado]

ISSEP has officially been upgraded. The revised exam outline reflects the latest Job Task Analysis, and the new adaptive training is built to support systems security engineers with targeted, personalized instruction.

The platform adapts to your pace and confidence level, offering immediate feedback and dynamic content. Updated learning materials - including a revised eTextbook and study questions eBook - are now available to support your preparation.

If you specialize in systems security engineering, this is your opportunity to validate your expertise with a credential built for today’s challenges.

Learn more about the ISSEP updates: https://www.isc2.org/insights/2025/08/next-level-certifications-for-cissp 

[ervinfrenzel]

@nkeaton, I do understand trying to think like the ISSEP - and like you the ISSMP and ISSAP were very familiar to you.  The CGRC was almost relaxing to be completely honest, I actually enjoyed that exam.  I know that the documentation that I keep running into says the "stakeholders" but then very explicitly states "stakeholders are not end-users" and the two should not be confused.  This poses a problem for me - not the statement that stakeholders are not end-users but the underlying thought process of disregard the end-user.  The new IATF (3.1) (Information Assurance Technical Framework 3.1 by National Security Agency Information Assurance Solutions Technical Directors. (Sep, 2002)) is now part of the conversation and is part of the study materials but I am struggling with this one.  I am not sure I can get through this one as it seems the mindset is just a bridge too far.

Ervin

[nkeaton]

@ervinfrenzel   I honestly believe that with a CGRC that you would be fine with the ISSEP.  I definitely did not read it and is not listed in the additional resources even on this version of the exam.  I understand what you are saying about shareholders.  It does make it tough to work on the solution space without all of the input.  I suppose that they are just inferring high level involvement, but you are right that usually does not give what is needed.