ISC2
Information Systems Security Architecture Professional
ISSAP · active
Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data. Salary premiums are estimates, not a promise of a raise.
- Exam cost
- Not verified
- Questions · time · passing score
- 125 questions · 180 minutes · Pass: 700/1000
- Prerequisites
- Active CISSP plus 2 years relevant experience, or 7 years relevant experience in at least two domains; eligible degree or credential may waive one year on the latter route.
- Estimated salary premium
- Not established by comparable evidence
- Renewal requirements
- Not verified in this audit; confirm with issuer.
- Difficulty
- Not rated
Domains covered
- Governance, risk and compliance (21%)
- Security architecture modeling (22%)
- Infrastructure and system security (32%)
- Identity and access management architecture (25%)
Where this credential fits
MyCyberPath career mappings are planning guidance, not universal employer requirements.
Compare this certificationRecent catalog changes
- ISC2updated
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: renewal period years. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 3
- After
- Not verified
- ISC2updated
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- https://www.isc2.org/certifications/issap
- After
- https://www.isc2.org/certifications/issap/issap-certification-exam-outline
- ISC2domain change
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: skills gained. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- ** Security Architecture Design · Enterprise Security Architecture · Risk Management Frameworks · Security Solution Analysis · Cloud Security Architecture · Data Security Architecture · Network Security Architecture · Identity and Access Management (IAM) Architecture · Application Security Architecture · Business Continuity Planning · Disaster Recovery Planning · Threat Modeling · Security Operations Design · Governance · Risk · and Compliance (GRC) Integration
- After
- Governance, risk and compliance (21%) · Security architecture modeling (22%) · Infrastructure and system security (32%) · Identity and access management architecture (25%)
- ISC2updated
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: salary premium low. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISC2updated
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: abbreviation. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISC2price change
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: exam cost usd. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 599
- After
- Not verified
- ISC2updated
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Not verified
- After
- https://www.isc2.org/certifications/issap/issap-certification-exam-outline
- ISC2exam update
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 125 multiple-choice questions, 3-hour time limit, 700 out of 1000 points passing score
- After
- 125 items; 180 minutes; multiple choice and advanced items; pass 700/1000.
- ISC2updated
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- No additional AMF if CISSP certified. If not CISSP certified, and holding CC certification, AMF increases to a single fee of U.S. $135.
- After
- Not verified
- ISC2updated
Information Systems Security Architecture Professional
Information Systems Security Architecture Professional: prerequisites. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Candidates must be a CISSP in good standing and have two years of cumulative, full-time experience in one or more of the four domains of the current ISSAP Exam Outline. Alternatively, candidates must have a minimum of seven years of cumulative, full- time experience in two or more of the domains of the current ISSAP Exam Outline. Earning a post-secondary degree (bachelor’s or master’s) in computer science, information technology (IT), or related fields, or an additional credential from the ISC2 approved list, may satisfy one year of the required experience. Only one year of experience can be waived. Part-time work and internships may also count towards the experience requirement.
- After
- Active CISSP plus 2 years relevant experience, or 7 years relevant experience in at least two domains; eligible degree or credential may waive one year on the latter route.