BUILD TOMORROW.
FOR A MORE
SECURE TOMORROW.
ISSAP (Information Systems Security Architecture Professional)
ISC2 / ISSAPBuild the skills for your next mission.
This advanced certification course is meticulously designed for seasoned cybersecurity professionals seeking to specialize in the architectural aspects of information security.
Course objectives
Build practical skills across the key domains covered in ISSAP (Information Systems Security Architecture Professional) (ISSAP).
Architecting Access ControlDesign and architect identity and access management (IAM) systems and solutions.
- Design and architect identity and access management (IAM) systems and solutions.
- Evaluate and select appropriate authentication mechanisms (e.g., multi-factor, biometrics, federated).
- Design authorization models and enforcement mechanisms (e.g., RBAC, ABAC, DAC, MAC).
- Integrate access control with enterprise directories and identity providers.
- Architect solutions for privileged access management (PAM).
- Design secure access for cloud environments and mobile devices.
Communications and Network Security ArchitectureDesign secure network topologies and segmentation strategies (e.g., VLANs, micro-segmentation).
- Design secure network topologies and segmentation strategies (e.g., VLANs, micro-segmentation).
- Architect secure communication protocols and services (e.g., TLS, IPsec, DNSSEC).
- Design secure remote access solutions (e.g., VPNs, ZTNA).
- Evaluate and integrate network security devices (e.g., firewalls, IDS/IPS, WAFs).
- Architect secure wireless networks and IoT environments.
- Design network security for cloud deployments (e.g., VPCs, security groups).
Security Architecture AnalysisPerform security architecture reviews and assessments.
- Perform security architecture reviews and assessments.
- Conduct threat modeling and risk analysis for proposed architectures.
- Evaluate architectural compliance with security policies, standards, and regulations.
- Identify and address architectural vulnerabilities and weaknesses.
- Recommend architectural improvements based on security best practices and emerging threats.
Security Architecture DesignApply security architecture principles and frameworks (e.g., TOGAF, SABSA).
- Apply security architecture principles and frameworks (e.g., TOGAF, SABSA).
- Design secure software development lifecycle (SSDLC) processes.
- Architect secure application components and APIs.
- Design secure data storage and processing architectures.
- Implement security patterns and anti-patterns in architectural design.
- Architect for resilience and disaster recovery.
Operations Security ArchitectureDesign security monitoring and logging architectures (e.g., SIEM, SOAR).
- Design security monitoring and logging architectures (e.g., SIEM, SOAR).
- Architect incident response and forensics capabilities.
- Design vulnerability management and patch management architectures.
- Architect secure configuration management and change control processes.
- Design architectures for security testing and assurance.
Cloud Security ArchitectureDesign secure architectures for Infrastructure as a Service (IaaS).
- Design secure architectures for Infrastructure as a Service (IaaS).
- Architect secure solutions for Platform as a Service (PaaS).
- Evaluate and integrate security controls for Software as a Service (SaaS).
- Design cloud identity and access management (IAM) solutions.
- Architect data security and privacy in cloud environments.
- Design solutions for cloud security posture management (CSPM) and cloud workload protection (CWPP).
Find your DoD 8140 pathway
Explore how this training may align to DoD 8140 work roles and proficiency levels.
About this course
This advanced certification course is meticulously designed for seasoned cybersecurity professionals seeking to specialize in the architectural aspects of information security. The ISC2 ISSAP certification validates an individual's expertise in designing, developing, and analyzing security architectures that align with business objectives and regulatory requirements. Participants will gain a deep understanding of integrating security into the entire system development lifecycle, ensuring robust and resilient defense mechanisms across complex enterprise environments. This course prepares candidates to strategically lead the security design of critical information systems, from conceptualization to implementation.
Training alone does not establish DoD 8140 qualification. Confirm position-specific requirements with your organization.