ISC2 announced in August 2025 the release of updated exam outlines and new AI-powered adaptive self-paced training for its three most advanced security certifications: the Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP), and Information Systems Security Management Professional (ISSMP). The credentials require active CISSP status plus two years of additional specialized experience, positioning them as the natural next step for senior CISSP holders looking to formalize deep specialization.
The exam updates reflect findings from ISC2’s Job Task Analysis process, which evaluates each certification’s content on a rotating cycle to ensure alignment with current professional practice. The new outlines for all three credentials took effect on August 1, 2025. According to the ISC2 announcement, the AI-driven adaptive courses released alongside the updated outlines are self-paced and designed to match individual learning needs rather than delivering fixed-length content to everyone regardless of their existing knowledge base.
Connection to the April 2026 Waiver Changes
The timing of these updates connects directly to the broader changes coming to CISSP certification requirements. As part of ISC2’s April 2026 restructuring of the experience waiver credential list, the ISSAP, ISSEP, and ISSMP were added as standalone credentials that qualify for the one-year experience waiver. Previously, these advanced certifications required active CISSP status to pursue — they were concentrations, not independent credentials. Their addition to the waiver list as standalone qualifications reflects their new status in ISC2’s certification architecture.
CISSP holders who want to pursue an advanced credential now have updated training resources to work with. Candidates for ISSAP, ISSEP, or ISSMP must be CISSPs in good standing and hold two years of cumulative full-time experience in one or more of the relevant exam outline domains, or hold a minimum of seven years cumulative full-time experience in two or more domains. Details on eligibility and the updated exam outlines are available on the ISC2 certifications page.
Early reactions in the ISC2 community forums were mixed. Some candidates who sat for the ISSEP shortly after the August exam update noted that the new outline diverged significantly from available study materials — a common friction point whenever exam content updates ahead of the supporting resources. ISC2 acknowledged the gap and indicated materials would be updated accordingly. For candidates planning to pursue any of the three advanced credentials in early 2026, reviewing the current exam outlines directly from ISC2 before selecting study resources is advisable.