ISSAP
Information Systems Security Architecture Professional
Created per CertMap methodology · Updated 12 May 2026 · About the editorial team →

▾ Jump to …4 sections
Overview
What is ISSAP?
ISC2 specialization for security architecture. Requires an active CISSP. Focus on GRC, Security Architecture Modeling, Infrastructure Security, and IAM architecture. For senior security architects in enterprise environments.
Suitable for
Quick facts
Key details
Cost, prerequisites, exam & renewal
Cost over 5 years
Prerequisites
Active CISSP + 2 years experience in the respective specialization
Exam format
Linear, 125 questions, 3 hours, 700/1000
Renewal & maintenance
60-140 CPEs per 3-year cycle, $135/year AMF
Classification
CertMap score and matching roles
Rating
Matching NICE roles
Mapping from NIST NICE Framework SP 800-181, status 2025. NIST source ↗
More certifications
More certifications
From ISC2
CCISC2 Certified in CybersecurityCCSP(ISC)2 Certified Cloud Security ProfessionalCISSP(ISC)2 Certified Information Systems Security ProfessionalHCISPPHealthCare Information Security and Privacy PractitionerISSEPInformation Systems Security Engineering ProfessionalISSMPInformation Systems Security Management ProfessionalSSCP(ISC)2 Systems Security Certified PractitionerIn Architecture / Engineering
ISSEPISC2This page follows CertMap methodology: editorial content is curated by hand. Score, costs and NICE mapping are aggregated from official provider documents. Score methodology → · TCO methodology →
Transparency: CertMap is operated by Daniel Thomas Heessel, who is also managing director of Threat‑Informed, a company specialising in Threat‑Informed Defense. CertMap currently receives no commissions from certification providers, no affiliate links, no sponsored placements. Podcast and interview guests are not paid for appearances and receive no affiliate commissions.
From the knowledge base
View all articles →Nobody is an AI security expert yet.
Which path fits your background, and the certifications that actually count. Three ways into a field where nobody has a ten-year head start.
About the CertMap editorial team
CertMap is an independent platform for comparing cybersecurity certifications, built on data-journalism standards that combine editorial curation with mechanical aggregation.
Certification vs. Certificate: What's the Difference?
Personnel certification per ISO/IEC 17024 versus a training certificate. Why the distinction matters.