Provisionally passed the ISSEP. Background: 4xISACA, 2xISC2, 2xGIAC,1xIAPP certs. 35 years in the industry. I always give myself 3 months to study for an exam, I first did the official ISC2 online training (i.e. watched the videos) to get a feel for the course/certification. After that I did the training exam. Then I spent about 1.5 of the 3 months to read all the material. Stopped reading about one week before the exam. I spent the bulk (80%) of the time reading NIST 800-160, NIST 800-37 and IATF 3.1. I did not read PMBOK or INCOSE at all (except the incose PDF-document that was linked in the course). I normally use pocketprep but it was not available for ISSEP, tried cccure and udemy practice exams but it felt like those very made for an older version of the exam and the content did not align with the ISC2 course. So I used the training exam instead. I found the exam very hard, I was convinced I had failed.
View More
Hey all - I was thinking about dipping my toe into the waters on ISSEP. Has anyone taken the cybrary.it ISSEP course? Was it beneficial? I don't suspect it is nearly enough to pass ISSEP. Thanks!
View More
What is the value of the ISSEP for anyone outside of the US? I hold both the ISSMP and ISSAP certifications and was planning to take my ISSEP exam at the beginning of December. I started reading and studying from the limited resources I could find. However, I can’t understand the relevance of this exam for me, as it seems very US government-centric. I appreciate that this is an engineering concentration and needs to be based on some formal material, and the NIST standards fill this gap. But why is it so US government-focused? Why can’t it be more generic, encompassing good engineering security practices and the SDLC processes laid out in the NIST documents? This approach would make it more accessible and relevant to people outside of the US and the US government. Is anyone else choosing not to take this exam because it's too US-focused?
View More
Hi, I have failed the exam 2 times. The 2 times common below proficiency is Domain 4 System Implementation, Verification, and Validation. Does anyone have any suggestions for studying this domain? Thanks!
View More