ISSAP Passed

I passed ISSAP today, 2nd attempt though, big relief!

I used a lot of study materials but as you know those are only for buidling your basic:

Official (ISC)² CISSP-ISSAP CBK Live Online Training
Official (ISC)2® Guide to the ISSAP CBK, Second Edition
Security Engineering A Guide to Building Dependable Distributed Systems - Ross Anderson

In addition, resourses from CISSP:

CISSP For Dummies - 4th Edition - Miller, Gregory, Peter
CISSP Study Guide - - Eric Conrad
CISSP All-in-One Exam Guide, 7th Edition
CISSP (ISC)2 Certified Information Systems Security Professional Official Study Guide - Seventh Edition - Sybex
CISSP Official (ISC)2 Practice Tests

Several NIST documents.
and Google

Thanks
SB

Find more posts tagged with

Comments

gespenstern

Congrats! What were your weak areas the first time? What's next?

SkyBlue

gespenstern wrote: »

Congrats! What were your weak areas the first time?

Thanks.

I scored 650 in my first attempt on November 5, 2016. Here are the top 2 weak domains reported:

Physical Security Considerations
Communications & Network Security

Regards

JoJoCal19

Congrats on the pass! As well I'd like to know what's next?

E Double U

Congratulations! What study material did you use?

SkyBlue

JoJoCal19 wrote: »

Congrats on the pass! As well I'd like to know what's next?

Thanks.

I will go for ISC2 CCSP - Certified Cloud Security Professional if my company pay for it.

Regards

chrisone

Congrats! Hard to believe there are only under 1,200 ISSAP certified pros in the USA. I hope to be one in 2017

What material did you use?

DAVIS NGUYEN

Congrats!

gespenstern

SkyBlue wrote: »

Here are the top 2 weak domains reported:

Physical Security Considerations
Communications & Network Security

Regards

LOL, these would be my strongest!

5ekurity

Congrats! Interested to know what material you used as well.

SkyBlue

I updated my main post with study material used.

Thanks

corpsec

Was the ISSAP focused on encryption/algorithms and BCP/DR?

SkyBlue

corpsec wrote: »

Was the ISSAP focused on encryption/algorithms and BCP/DR?

I found fairly distributed questions as it supposed to be:

The ISSAP examination domains and weights are:

Domains
Weights

1. Access Control Systems & Methodology

21%

2. Communications & Network Security
22%

3. Cryptography
11%

4. Security Architecture Analysis
25%

5. Technology Related Business Continuity Planning (BCP) & Disaster Recovery Planning (DRP)
11%

6. Physical Security Considerations
10%

Total
100%

https://www.isc2.org/issap.aspx

sameoj

Congrats

jazz_01

Congratulations on you pass. So, what's the next certification you are going to take?

Blade3D

Curious as to the usefulness of this, I had never noticed these concentrations on the website before.

I am currently studying for the CISSP, is it possible to take this a couple of months after? I didn't see anything under the requirements that said otherwise. It listed needing 2 years experience and the CISSP. Wondering if that's 2 years experience while having the CISSP during that time or just 2 years experience with a current CISSP?

Also, wondering if it's relevant to my job as a Systems Designer. I hope to be looking for a more security related role once I get the CISSP.

denjin

Congratulations! I passed it recently myself. I found it harder than the CISSP but more technical. It was an interesting test and covered very new technology - know your stuff.

AtlantaBob

Is it passable with just CISSP knowledge? I just passed CISSP after a 5 day bootcamp and no other study. I don't have time to be reading all these books, LOL. How much harder is it?

cyberzhawk

Congrats SB on passing the ISSAP! I'm beginning to study for ISC2 CAP. Got the recommend material from ISC2's website. Do you recommend or know of any other materials/websites/resources for studying? Thanks.

denjin

You need 2 years of security architecture experience and the application (after you pass the test) has you state which domains you have experience in. You also will have to provide your CV and references.

It is different than the CISSP exam as it does go into more depth in terms of technology. I think CISSP was a bit more high level and sort of management-focused.

In terms of what to use to study, the CIB (exam guide for ISSAP) lists a lot of other resources. I read quite a few of those.