Reviews 5,0
Reviews 5,0
Certified Information Systems Security Professional Architecture (CISSP-ISSAP)
Designing security architectures for large-scale IT environments requires more than technical knowledge. CISSP-ISSAP connects strategic thinking, resilient models, and a clear understanding of the relationship between business objectives, risk, and security.
Key topics
- Designing and evaluating security architectures for complex enterprise environments.
- Applying governance, risk, and compliance frameworks within an architectural context.
- Comparing cloud, hybrid, and zero trust architecture models.
- Integrating AI-driven and automated security approaches.
- Assessing and governing security-critical technologies.
Prerequisite
Several years of professional experience in information security and a strong grasp of IT architectures and security processes – ideally with an existing CISSP certification.
Target group
Suited to security architects, experienced IT security professionals, technical leaders, and those responsible for shaping security strategies.
Security architecture is a key priority today – especially where cloud technologies, regulatory requirements, and the growing use of AI intersect. CISSP-ISSAP strengthens the ability to develop sound security concepts and take long-term responsibility for them.
Course content
Governance and Risk Management
- Analyzing and categorizing legal and industry-specific requirements.
- Methods for identifying, assessing, and managing security risks.
Security Architecture Design and Review
- Designing and documenting comprehensive security architectures.
- Validating architecture designs through structured review methods (e.g., FAT, regression testing).
Infrastructure Security and Network Protection
- Defining security requirements and protection objectives for IT infrastructure.
- Building and configuring effective protection systems.
- Securing shared services (e.g., Wi-Fi, email, VoIP, UC, DNS, NTP).
- Selecting and implementing technical security measures.
- Designing and integrating monitoring and detection solutions.
- Developing cryptographic protection solutions for data and communications.
- Planning secure network and communication infrastructures (e.g., VPN, IPsec, TLS).
- Analyzing physical and site-specific security aspects.
Identity and Access Management
- Managing identity lifecycles and user account administration.
- Architecting and planning access control systems.
- Designing and evaluating identity and access management solutions.
Application Security and Development Protection
- Embedding security requirements into the software development process (e.g., secure coding).
- Defining security strategies for applications and cloud environments (e.g., CSP).
- Applying preventive protection mechanisms based on established standards (e.g., OWASP).
Operational Security and Resilience
- Gathering and structuring security requirements from legal, compliance, and organizational perspectives.
- Building monitoring solutions for threat detection (SIEM, insider risks, user behavior analysis).
- Developing business continuity concepts and stability frameworks.
- Reviewing and validating emergency and recovery plans.
- Designing and establishing incident response processes.
Up to 100% funding for your continuing education
Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.
Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.
What defines the CISSP-ISSAP specialization?
- CISSP-ISSAP is a recognized ISC2 specialization focused on IT security architecture – from planning and design to the evaluation of secure architectures in complex enterprise environments.
Who benefits most from CISSP-ISSAP?
- Experienced IT security professionals who design security architectures, make strategic security decisions, or take responsibility for enterprise-level security concepts.
What qualifications are needed for CISSP-ISSAP?
- In-depth knowledge of information security and several years of professional experience in IT security or architecture are required. A valid CISSP certification is also a prerequisite.
What content does CISSP-ISSAP include?
- The certification covers security architecture, risk analysis, governance, infrastructure design, access management, cloud security, and technical security standards and frameworks.
How does CISSP-ISSAP differ from CISSP?
- CISSP provides broad foundational knowledge in information security. CISSP-ISSAP specializes in architecture, design, and technical security decisions at the system level.
What makes CISSP-ISSAP unique compared to CISSP?
- While CISSP takes a generalist approach, CISSP-ISSAP focuses on the architectural perspective – from system design and evaluation models to the implementation of sound security concepts.
What is the global standing of CISSP-ISSAP?
- CISSP-ISSAP is internationally recognized and widely respected by enterprises, government agencies, and organizations as a credible proof of architectural expertise in information security.
