Validates knowledge of building security into systems from requirements through disposal, using systems engineering and risk management.
ISSEP is ISC2's advanced credential for systems security engineers who build security into systems from requirements through operation and disposal. It follows systems engineering and risk management practice and is most relevant on government and defense programs.
Holders describe little general recognition outside roles where a government or DoD requirement calls for ISSEP.
One ISSEP holder said it was not worth paying for yourself unless you need it for a government role; others treat it as a sensible sponsored add-on.
ISSEP is a CISSP concentration: with a CISSP you need two years of security engineering experience.
ISSEP renews every three years through continuing education and an annual fee.
All credits must be Group A. If you also hold CISSP, your ISSEP credits count toward the CISSP requirement, and 20 of your CISSP Group A credits must relate directly to ISSEP. One annual fee covers every ISC2 certification you hold.
ISC2 member policies ↗No. You need either an active CISSP plus two years in the ISSEP domains, or seven years in two or more domains without CISSP.
$599 in the US. If ISSEP is your first ISC2 certification, the $135 annual fee is also due after endorsement.
Yes. ISC2 now calls it ISSEP; the CISSP-ISSEP name comes from when CISSP was required.
Mainly for systems security engineers on government or defense programs that ask for it. Outside those roles it is less widely recognized than CISSP.
Last updated October 2026
