ISSEP ISSMP ISSAP 。。。。。考不完了，大家保重
https://www.isc2.org/cgi-bin/content.cgi?page=226

(ISC)2’s CAREER-ENHANCEMENT AND SUPPORT STRATEGY
FAQ INFORMATION REGARDING ISSEP, ISSMP, ISSAP, (CONCENTRATION EXAMS) AND THE (ISC)2 ASSOCIATE PROGRAM

General Information Regarding Concentration Examinations
ISSEP - Information Systems Security Engineering Professional
ISSMP - Information Systems Security Management Professional
ISSAP - Information Systems Security Architecture Professional
(ISC)2 ASSOCIATE PROGRAM

General Information Regarding Concentration Examinations

Requirement to Sit for a Concentration Exam. All concentration examinations (ISSEP, ISSMP, and ISSAP) are developed and owned by (ISC)² and designed to work in tandem with the CISSP credential. As such, being a CISSP in good standing is a requirement to sit for one or more of the concentration examinations.


Concentration Examination Fee. The INTRODUCTORY FEE to sit for a concentration examination is $295.00 USD.


Number of Test Questions. Each concentration examination is comprised of 100 scored items plus 25 pretest items, for a total of 125 items.


Time Allowed to Take the Test. Candidates are allowed 3 hours to complete each concentration examination.


Certification Parameters. Upon passing a concentration examination, the candidate will be initially certified in that area for a period to expire concurrently with the underlying CISSP credential (regardless of when the test date falls within the CISSP's three year certification period). No Continued Professional Education (CPEs) will be required during this initial partial certification period. Each 3-year full certification period thereafter will run concurrently with the underlying CISSP 3-year cycle and expiration date.


CPE Requirements. During these subsequent full 3-year certification periods, 20 of the 120 CPEs (already required for the underlying CISSP certificate) must be in the specific area of concentration. For example, if the CISSP took the ISSEP concentration examination and passed, he or she would be required to submit at least 20 of the total 120 hours he is required to submit for the CISSP certificate to be in the specific area of Engineering.


Fees. An Annual Maintenance Fee (AMF) of $35.00 per year, per concentration certification obtained, is required. This fee will be invoiced annually as an additional line item on the CISSP annual maintenance fee invoice sent at the end of each year during the certification period. Like the CISSP annual maintenance fee, these monies are used to defray the direct administrative costs of maintaining the credential.


Training. It is anticipated that training products will be available by mid-2004 for all concentrations.


Test Administration. The concentration examinations will be offered at all published testing events.


Availability. All concentration examinations will be available starting June 1, 2003.



ISSEP

Designation. ISSEP stands for Information Systems Security Engineering Professional.


Purpose for Development. ISSEP was developed under a joint effort between (ISC)2 and the United States National Security Agency, Information Assurance Directorate (NSA/IAD). The motivation and justification for NSA's involvement in this project is found in NSD 42 and the Federal Technology Transfer Act of 1986 (15 U.S.C. Section 3710A).

(ISC)2's motivation for involvement is found in its mandate to serve and improve the information security profession, and as such, seeks ways to meet the specific needs of its professionals in the private and public sectors. The development of concentration examinations is a direct response to (ISC)² research indicating that these needs of information security professionals were not being met. The ISSEP provides the means for (ISC)2 to offer CISSPs a mechanism to demonstrate specific competence in the concentrated area of information security engineering.


Content Orientation. One key goal in offering the ISSEP concentration certification is to encourage and ensure that professionals possess the specific knowledge required to perform the role of information system security engineer, within the broader scope of information security knowledge identified in the Common Body of Knowledge (CBK) and required for CISSP certification.


Role of ISSEP at the NSA. The NSA/IAD has committed itself to promoting this certification to its employees and vendors. While a specific policy statement has not been issued at this time, it is not known if the NSA/IAD will require, or simply prefer, individuals with the ISSEP in connection with certain information security projects.


Content Domains. The major domains of the ISSEP examination are:
Systems Security Engineering
Certification and Accreditation
Technical Management
U.S. Government Information Assurance Regulations


ISSMP

Designation. ISSMP stands for Information Systems Security Management Professional.


Purpose for Development. The development of concentration examinations is a direct response to (ISC)2 research indicating that these needs of information security professionals were not being met. This examination is designed to provide CISSPs with a mechanism to demonstrate competence in the more in-depth and concentrated requirements of information security management, within the broader scope of information security knowledge identified in the CBK and required for CISSP certification.


Content Domains. The major domains for this examination are:
Enterprise Security Management Practices
Enterprise-Wide System Development Security
Overseeing Compliance of Operations Security
Understanding BCP, DRP, and COOP
Law, Investigations, Forensics and Ethics


ISSAP

Designation. ISSAP stands for Information Systems Security Architecture Professional.


Purpose for Development. The development of concentration examinations is a direct response to (ISC)2 research indicating that these needs of information security professionals were not being met. This examination is designed to provide CISSPs with a mechanism to demonstrate competence in the more in-depth and concentrated requirements of information security architecture, within the broader scope of information security knowledge identified in the CBK and required for CISSP certification.


Content Domains. The major domains for this examination are:
Access Control Systems and Methodologies
Telecommunications and Network Security
Cryptography
Requirements Analysis & Security Standards, Guidelines, Criteria
Technology Related BCP and DRP


(ISC)2 ASSOCIATE PROGRAM

Background. (ISC)2 is committed, by mandate, to serving the needs of the information security community. This community of professionals is comprised of persons working in various capacities and roles, and with persons at various stages of career development within these roles. While (ISC)2 is best known for its CISSP credential, specifically designed to serve information security professionals in managerial roles with at least four (4) years of experience, (ISC)2 in-depth research has identified a broad range of unmet certification needs for people who work in other capacities and professions, and who are at different stages of career development, within the information security community. (ISC)2 has embraced the challenge, per its mandate, to meet these diverse and growing needs that have been identified. Accordingly, in 1999, (ISC)2 launched the SSCP certificate for those professionals working as system administrators, network managers, and other technical roles within organizations. In June 2003, (ISC)2 is launching the ISSEP (launched jointly with the US NSA), ISSAP, and ISSMP certificates for current CISSPs who wished to get certified in the specific areas of system security engineering, architecture, and/or managerial concentrations.


Purpose of Development. (ISC)2 has established the (ISC)2 Associate program for those who have chosen a career path in information security and wish to become an SSCP or CISSP in the future, but who have are still obtaining the required years of experience. (ISC)2 motivation for offering the (ISC)2 Associate program is found in its desire to support, throughout their careers, those who chose information security as their vocation, and not to simply offer such support after individuals have become highly experienced. For example, (ISC)2 wishes to offer support through its many service offerings to the new college graduate in information security who would greatly benefit from these services as they work towards meeting the requirements for professional certification.


How to Become An (ISC)2 Associate. A candidate who wishes to sit for the CISSP or the SSCP test may do so. On the application form (whether Web or paper format), the candidate must (1) complete all the information requested including executing the Agreement subscribing to the Code of Ethics, (2) outline his or her experience, (3) indicate when he or she expect to obtain the number of years required for certification (4 years for CISSP and 1 year for SSCP), and (4) submit the required examination fee. The candidate will then be sent admission documents to take the test. He or she may take the test at any testing location published on the isc2.org website.


How an (ISC)2 Associate Becomes Certified as a CISSP or SSCP. Upon taking and passing the test, the candidate will be issued a pass letter documenting that he or she has become an "(ISC)2 Associate" and has passed the examination. (ISC)2 will send a reminder notice to the candidate on the date he or she projects or expects the required experience will be obtained, but it is the candidate's responsibility to notify (ISC)2 at (888) 333-4458 when he or she has actually obtained the necessary experience for certification (4 years for CISSP and 1 year for SSCP). At that time, the (ISC)² Associate will be provided with an Endorsement Form, which is also available as a downloadable document at the isc2.org website. The (ISC)2 Associate must have the Endorsement Form completed by a qualified 3rd party in accordance with the instructions on the form, and submit it to (ISC)2. Upon receipt of the properly executed Endorsement Form, the certificate (CISSP or SSCP) will be issued to the candidate, and he or she becomes certified at that point-in-time. An (ISC)2 Associate is NOT a CISSP or SSCP and may not use this designation, or represent that he or she has this designation, until such time at the required experience is obtained and the certificate is actually issued.


(ISC)2 Associate Endurance. The (ISC)2 Associate designation is good for a period of five (5) years from the date of the PASS letter issued. The (ISC)2 Associate has a maximum of five (5) years to obtain the required experience and submit the required Endorsement Form for certification.


Fees. There is an Annual Maintenance Fee (AMF) of $35.00 required for an individual to maintain his or her (ISC)2 Associate status in good standing. This will be invoiced to the (ISC)2 Associate following each full year of associate status participation.


Continued Professional Education. Because an (ISC)2 Associate is not certified, no continued professional education credits are required to maintain associate status in good standing

好长......................... 啊.
是不容易考完啊.