ISC2's architecture concentration for CISSPs — the credential that proves you design secure infrastructure and identity systems, not just administer or audit them.
ISSAP is ISC2's advanced concentration for security architects — you need an active CISSP before you can even sit for it, which is why the credential reads as proof you've moved from general practice into architecture-level design. The exam weights Infrastructure and System Security Architecture at 32% and Identity and Access Management (IAM) Architecture at 25%, the two domains that separate someone who reviews a network diagram from someone who designs the segmentation, access control, and identity infrastructure an enterprise actually runs on. Add Security Architecture Modeling and Governance, Risk, and Compliance, and it's the concentration CISSPs add when their next title is Security Architect, Principal Architect, or CISO-track — not because they need more security knowledge, but because they need to prove they can architect it.
Source: ISC2 Cybersecurity Workforce Study (ISSAP salary data, isc2.org/certifications/issap/issap-salary) and U.S. Bureau of Labor Statistics, Occupational Outlook Handbook — Information Security Analysts · data as of 2024–2025
Self-paced access, AI Coach on every lesson, full-length practice exams, and a free course retake if you complete the readiness gate and still don't pass your exam on the first attempt. Exam registration and voucher are purchased separately, directly through the certifying body.
See the full curriculum100% self-paced online — study on your schedule, no bootcamp seat to book.
Training a whole team on CISSP-ISSAP? Fund a Training Bank account for any amount, then assign any course to any employee — self-serve, published discount tiers, no sales call.
Set up your team account
