ISSAP (Information Systems Security Architecture Professional)
The ISSAP recognizes security architects who design security solutions and give management risk-based guidance aligned with organizational goals. The exam weights infrastructure and system security most heavily, followed by IAM architecture, architecture modeling and GRC.
Exam Details
Fixed-length English exam with multiple choice and advanced item types at Pearson VUE test centers.
Standard registration in the Americas, Asia Pacific, Middle East and Africa. ISC2 also lists EUR 575.04 for EMEA and GBP 485.19 for the UK. Currency and taxes depend on the exam location.
Requirements and Renewal
Prerequisites
Either an active CISSP plus two years of cumulative, full-time experience in one or more of the four ISSAP domains, or seven years of cumulative, full-time experience in two or more of them (a degree or approved credential can waive one year). A passing candidate without the experience can hold Associate of ISC2 status for up to eight years.
Renewal
Without a CISSP, 140 Group A CPE credits per three-year cycle. Holders who also have a CISSP earn ISSAP-related Group A credits that ISC2 counts toward the CISSP requirement. A single U.S. $135 annual maintenance fee covers all ISC2 certifications held.
Current Version
ISSAP Exam Outline effective August 1, 2025, in effect since Aug 1, 2025.
Exam Domains
4 domains| Domain | Weight |
|---|---|
| Governance, Risk, and Compliance (GRC) | 21% |
| Security Architecture Modeling | 22% |
| Infrastructure and System Security | 32% |
| Identity and Access Management (IAM) Architecture | 25% |
DoD 8140 Work Roles
4 work rolesThe DoD 8140 Qualification Matrix V2.1 lists ISSAP as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Related Tool Categories
Frequently Asked Questions
Do I need a CISSP to earn the ISSAP?→
No. ISC2 accepts either a CISSP in good standing plus two years of relevant experience, or seven years of cumulative experience in two or more ISSAP domains.
When was the ISSAP exam outline last updated?→
The current outline took effect on August 1, 2025, as part of an update ISC2 made to all three of its advanced certifications.
How much does the ISSAP exam cost?→
Standard registration is U.S. $599, EUR 575.04 in EMEA or GBP 485.19 in the UK.
Sources
- ISSAP - Information Systems Security Architecture Professional
- ISSAP Certification Exam Outline
- ISC2 Updates Advanced Certifications ISSAP, ISSEP, ISSMP
- ISC2 Cybersecurity Certifications
- ISC2 Exam Pricing
- ISC2 Member Policies (CPE requirements)
- ISC2 Annual Maintenance Fees (AMF)
- Become an Associate of ISC2
- ISC2 Certification Maintenance Handbook
Exam details are checked against official ISC2 pages. Fees, exam versions, and renewal rules change; confirm with ISC2 before registering. ISSAP is a trademark of its owner. This site is not affiliated with or endorsed by ISC2.