(ISC)² has an obligation to its membership to maintain the relevancy of its credentials. These enhancements are the result of a rigorous, methodical process that (ISC)² follows to routinely update its credential exams. This process ensures that the examinations and subsequent continuing professional education requirements encompass the topic areas relevant to the roles and responsibilities of today's practicing engineering security professionals.

The content of the ISSEP has been refreshed to reflect the most pertinent issues that information security professionals currently face, along with the best practices for mitigating those issues. Some topics have been updated while others have been realigned. The result is an exam that most accurately reflects the technical and practical security knowledge that is required for the daily job functions of the information security engineering professional.

As a result of the content refresh, we have updated the domain names to describe the topics accurately.

The domain weights are as follows:

Please refer to the ISSEP Exam Outline for details.

Domains change because it is a reflection of a change in the knowledge, skills and abilities, as indicated by experts through the Job Task Analysis process.

The Official (ISC)² CISSP-ISSEP Training Course will be available in September 2018. The ISSEP CBK Textbook will not be updated at this time but is still a comprehensive resource that is relevant in preparing for the ISSEP.

The refreshed ISSEP exam will be available in English only.

No. The ISSEP exam will have the same number of items, and the time required to take the exam will be the same.

(ISC)² exams are experience-based that include experience-based questions that cannot be learned by studying alone. If you already have the CISSP, and have the experience in the domains covered in ISSEP and believe that you have sufficiently studied those domains, you should feel confident that you are qualified to take the new exam and pass it. (ISC)² cannot guarantee you will pass the exam.

No. For the ISSEP, a candidate is required to be a CISSP in good standing, demonstrate two years of cumulative paid full-time professional experience in one or more domains of this concentration, pass the CISSP-ISSEP examination, and maintain the credential in good standing along with the underlying CISSP.

The Official (ISC)² CISSP-ISSEP Training Course will be available in September 2018.