Certified Information Systems Security Professional – Information Systems Security Architecture Professional (CISSP-ISSAP) Certification in Yemen

Module 1: Security Architecture Principles and Design

Security Architecture Fundamentals

• Understand enterprise security architecture concepts, principles, and objectives.
• Explore how security architecture supports business requirements and organizational goals.

Security Architecture Frameworks and Models

• Study security architecture frameworks, reference models, and design methodologies.
• Understand how to integrate security requirements into enterprise architecture.

Security Requirements and Architecture Planning

• Identify business, technical, regulatory, and security requirements.
• Develop architecture plans that address confidentiality, integrity, and availability.

Module 2: Governance, Risk Management, and Compliance

Security Governance

• Understand security policies, standards, procedures, and organizational responsibilities.
• Align security architecture decisions with enterprise governance objectives.

Risk Assessment and Management

• Identify threats, vulnerabilities, and risks affecting enterprise systems.
• Apply risk analysis and treatment strategies to security architecture decisions.

Compliance and Regulatory Requirements

• Evaluate security architecture against applicable regulatory and compliance requirements.
• Understand audit readiness, control mapping, and security documentation.

Module 3: Security Architecture Modeling and Analysis

Architecture Modeling Techniques

• Develop architecture models representing security components, systems, and relationships.
• Understand logical, conceptual, and physical security architecture views.

Threat Modeling and Security Analysis

• Identify potential attack paths, trust boundaries, and architectural weaknesses.
• Apply threat modeling to evaluate security risks during system design.

Security Design Reviews

• Evaluate architecture designs against security requirements and control objectives.
• Recommend improvements to address weaknesses and reduce exposure.

Module 4: Infrastructure and System Security Architecture

Network Security Architecture

• Understand network segmentation, secure communication, firewalls, and security zones.
• Evaluate network designs for resilience, access control, and threat protection.

Cloud and Distributed Systems Security

• Explore security architecture for cloud platforms, distributed systems, and hybrid environments.
• Assess identity controls, data protection, network security, and shared-responsibility considerations.

Endpoint, Server, and Application Security

• Evaluate security requirements for endpoints, servers, applications, and supporting infrastructure.
• Understand secure configuration, vulnerability management, and architectural safeguards.

Cryptography and Key Management

• Review encryption, digital signatures, key management, and cryptographic controls.
• Identify appropriate cryptographic protections for enterprise information and communications.

Module 5: Identity and Access Management Architecture

Identity Management Architecture

• Understand identity lifecycle management, identity federation, and centralized identity services.
• Design identity processes that support secure access across enterprise systems.

Authentication and Authorization

• Explore multi-factor authentication, single sign-on, role-based access control, and least privilege.
• Evaluate authentication and authorization controls against organizational security requirements.

Privileged Access and Access Governance

• Understand privileged access management, access reviews, and segregation of duties.
• Assess controls for managing high-risk accounts and sensitive enterprise resources.

Identity Integration and Security Monitoring

• Evaluate identity integration with enterprise applications and infrastructure.
• Understand logging, monitoring, and detection of suspicious access activities.

Module 6: Security Architecture Implementation and Validation

Security Architecture Implementation Planning

• Translate architecture designs into implementation roadmaps and security requirements.
• Coordinate security controls with business priorities, technical constraints, and project plans.

Security Testing and Validation

• Review architecture validation, security testing, and control verification approaches.
• Evaluate whether implemented solutions satisfy defined security requirements.

Architecture Documentation and Communication

• Prepare architecture diagrams, design specifications, risk assessments, and recommendations.
• Communicate security architecture decisions to technical teams and business stakeholders.

Continuous Improvement and Architecture Review

• Review architecture performance, emerging threats, and changing business requirements.
• Recommend updates to improve security effectiveness and resilience.

Module 7: ISSAP Certification Exam Preparation

Certification Domain Review

• Revise the key security architecture concepts and domains covered by the current ISSAP exam outline.
• Identify knowledge gaps and prioritize areas for additional study.

Scenario-Based Practice Questions

• Work through architecture-focused questions involving governance, infrastructure, risk, and identity security.
• Practise selecting solutions that balance security requirements and business needs.

Mock Assessments and Final Revision

• Complete practice assessments to evaluate understanding and identify improvement areas.
• Review challenging topics, question strategies, and time-management techniques.