thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ISC2 · Cybersecurity · Expert

ISC2 CISSP-ISSEP (Engineering) exam guide

Exam ISSEP

CISSP-ISSEP (Information Systems Security Engineering Professional) proves you can build security into systems across their lifecycle using systems engineering methods such as NIST SP 800-160. Developed with the NSA, it is especially valued in U.S. federal and defence engineering roles.

Questions125
Time limit180 minutes
Passing score700 (0-1000 scale)
Exam fee$599 USD
Valid for3 years
DeliveryPearson VUE test center

Format: Multiple choice and advanced item types.

Who it's for

CISSP holders working as systems security engineers, often on government or defence programs.

What the exam covers

Systems Security Engineering Foundations—
Risk Management—
Security Planning and Engineering—
Systems Security Implementation, Verification and Validation—
Secure Operations, Change Management and Disposal—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: Active CISSP plus two years of cumulative full-time experience in one or more ISSEP domains.

Recommended: Experience applying NIST SP 800-160, the Risk Management Framework and systems engineering lifecycles.

Keeping it active

Three-year cycle tied to your CISSP: at least 20 CPE credits in the concentration area per cycle (these count toward CISSP's 120), and the CISSP annual maintenance fee. CISSP must stay active.

Skills & careers

Skills it validates

  • Applying systems security engineering principles
  • Integrating security into the SDLC and acquisition
  • Risk management with NIST RMF
  • Security requirements definition and traceability
  • Verification and validation of security controls
  • Secure operations, change management and disposal

Job roles

Systems Security EngineerInformation Systems Security EngineerSecurity ArchitectCybersecurity Engineer (Federal)Security Control Assessor

DoD 8140

Historically approved for DoD 8570 IASAE III; listed in the DoD 8140 matrix for engineering work roles such as Systems Security Developer. Confirm on the DoD CWQ site. Open the DoD Workforce Navigator

Where it fits in your path

Take before

ISC2 CISSP

You are here

ISC2 CISSP-ISSEP (Engineering)

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1-2: Read the ISSEP outline (effective August 2025) and NIST SP 800-160 Vol. 1.
  2. Week 3-4: Engineering foundations and security planning; map them to the systems lifecycle.
  3. Week 5: Risk management with NIST RMF (SP 800-37, 800-53).
  4. Week 6: Verification, validation, operations and disposal.
  5. Week 7-8: Timed practice exams and targeted review.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • The exam leans heavily on NIST publications; know SP 800-160, 800-37 and 800-53 structure.
  • Think in lifecycle terms: where in the lifecycle a question sits often decides the answer.
  • Expect requirement traceability and V&V questions that are rare on CISSP.
  • Federal acquisition context appears; read scenarios for the stakeholder's role.

Key terms for this exam

All 3 terms Study with thinQcards™

Frequently asked questions

How much does ISSEP cost?

$599 in the Americas.

Who should take ISSEP?

Systems security engineers, particularly in U.S. government and defence work.

Does ISSEP require CISSP?

Yes, an active CISSP is required.

When did the ISSEP outline change?

A new outline took effect 1 August 2025.

ISSEP vs ISSAP?

ISSEP focuses on engineering security into systems over the lifecycle; ISSAP focuses on designing security architecture.

Official page: www.isc2.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.