CISSP concentrations
CISSP-ISSAP, CISSP-ISSEP and CISSP-ISSMP (architecture, engineering and management concentrations) · ISC2
The three concentrations deepen the CISSP in a specialist area: ISSAP for security architecture, ISSEP for systems security engineering and ISSMP for security management. They prove real seniority, but very few people hold them and recruiters, especially in France, seldom ask for them. Their strength is to set a confirmed CISSP apart; their limit is a narrow audience, and ISSEP is closely tied to US federal methods.
- Exam
- One linear exam per concentration: 125 questions (multiple choice and advanced item types) in 3 h, pass mark 700/1,000. Outlines in force since 1 August 2025.
- Exam price
- $599Per concentration. €575.04 in Europe.
- Required experience
- Be a CISSP in good standing with two years of full-time experience in the concentration’s domains, or have seven years of experience in at least two of its domains (one year can be waived by a degree or an approved credential).
- Validity and maintenance
- 3-year cycle: 60 CPE credits specific to the concentration (20 per year), counted within the CISSP’s 120, or 140 CPE without a CISSP. No extra annual fee beyond the single US$135.
- Format
- Multiple choice
- Recognition
- ISO/IEC 17024 accredited · DoD 8140 approved
Who is it for?
Senior professionals, usually CISSP holders with two more years in architecture, engineering or security management, who want to stand out for a lead architect or head of security role.
Domains covered
- ISSAP: governance, risk and compliance (21%), architecture modelling (22%)
- ISSAP: infrastructure and system security (32%), IAM architecture (25%)
- ISSEP: systems security engineering foundations (24%), risk management (20%)
- ISSEP: security planning and engineering (22%)
- ISSEP: implementation, verification and validation (20%), operations (14%)
- ISSMP: leadership and organisational management (21%)
- ISSMP: systems lifecycle (15%), risk management (20%)
- ISSMP: security operations (18%), contingency management (12%)
- ISSMP: law, ethics and security compliance management (14%)
Belinda’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
