Security professionals demonstrate with the CISSP certification that they have a solid knowledge of information security in a broad sense. However, the purpose of CISSP is not to provide equal depth in every area. CISSP certified individuals who are (going to be) involved in the design and implementation of architectural models, solutions, and technologies can deepen their knowledge with the ISSAP concentration. ISSAP examines the analytical process of information security through the lens of the most relevant domains for architecture from the CISSP CBK.

The ISSAP training is particularly suitable for security architects, security analysts, and other professionals responsible for designing and structuring information security within organizations. In this role, the security architect acts as the link between strategic decision-making at the management level and the technical implementation of security measures.

With the CISSP-ISSAP certification, you demonstrate that you possess in-depth knowledge of designing, assessing, and improving security architectures and security solutions. Additionally, the certification shows that security risks can be translated into strategic advice for management and stakeholders, ensuring that security aligns with organizational objectives and business risks.

Security Architect

The Security Architect plays a leading role in the information security of an organization. He/she is almost always (co)responsible for the development, design, and analysis of an organization-wide security plan. ISSAP certified individuals know and use best practices and standards for this task, where security architecture is primarily in service of business goals. Well-structured plans must be practically executable without too much effort while still providing sufficient protection for the organization and its (critical) information.

The role of security architect can be filled by both internal and external professionals. This makes ISSAP also very suitable for consultants who want to broaden their field or demonstrate knowledge with certification. In our training, you will be guided through the six ISSAP domains with various examples and tips. Additionally, the training is an ideal preparation for the (ISC)2 exam. To participate in the ISSAP exam, you must hold a valid CISSP certification.

AI

The CISSP-ISSAP training also covers how AI is integrated within modern security architectures and enterprise environments. The updated exam material focuses on designing secure AI-native infrastructures where AI serves both as a defense mechanism and a security risk. Topics such as AI-driven identity & access management, Zero Trust, adaptive authentication, and automated access control are explicitly part of the architectural approach. Furthermore, the training addresses AI-supported SOC, SIEM, and SOAR solutions, including securing machine learning models against attacks such as prompt injection and model manipulation. Secure AI infrastructures are also discussed, including hardware-rooted trust, trusted execution environments, micro-segmentation, and AI-driven network security. Additionally, the ISSAP covers how organizations can integrate AI risks, compliance requirements, explainability of AI decisions, and vendor risks within governance and security architectures.

The CISSP-ISSAP training is classroom-based but can also be attended Live Online if desired. You will attend the training live remotely with our own instructor, follow along with the slides and notes on the whiteboard, and can ask questions to both the trainer and your fellow participants. So, it's basically just like being present at the classroom training, but from your own location. If the Live Online training does not meet your expectations, you may attend the classroom training again with us free of charge within a year.