SecurityOctober 15, 202610 min read

CISSP-ISSAP Training vs Self-Study: Do You Need a Course? (2026)

No course is required for the CISSP-ISSAP. Here is what the training on the market costs, what it gives you, and when self-study is the smarter spend.

  • NoCourse required?
  • $595-$2,880Official course
  • ~$0-25Self-study
  • 80-150 hPrep time
  • $599Exam fee
CISSP-ISSAP training vs self-study - price line of every course option

Table of Contents

SHORT ANSWER

Most ISSAP candidates do not need paid training. They are experienced architects, the exam rewards judgment built on real design work, and ISC2 publishes the outline, guide and flash cards free. Pay for ISC2's 90-day self-paced course ($595, or $476 for members) if you want the only text aligned to the 2025 four-domain outline or a weak domain needs structure. The $2,880 live class or a $2,999 boot camp mostly makes sense when an employer pays.

ISSAP is ISC2's security architecture credential, and the people who sit it are mostly senior security and enterprise architects. A CISSP is no longer required: ISC2 accepts a CISSP plus two years of ISSAP-domain experience, or seven years without one. The exam is 125 items in three hours at Pearson VUE test centres, costs US$599 and follows the four-domain outline in force since 1 August 2025.

The training market is thin. ISC2 sells an adaptive self-paced course and a three-day live online class, and only a few boot camp firms still run ISSAP, on a handful of dates a year. Third-party videos and question banks are scarce, and some still follow the retired six-domain outline. ISC2's self-study page lists no standalone ISSAP textbook: the official eTextbook and study-questions eBook come only inside its courses.

Is a course required for the CISSP-ISSAP?

ISC2 sets no training requirement for ISSAP. Anyone can buy the US$599 exam, and every course is optional. What gets mistaken for a training rule is the experience requirement, which ISC2 checks at endorsement after you pass: a CISSP in good standing plus two years of ISSAP-domain experience, or seven years of cumulative experience across two or more domains without a CISSP. A relevant degree or approved credential can waive one year.

Cheapest credible way to prepare:Use ISC2's free material (the 2025 exam outline, Ultimate Guide, flash cards and knowledge check), free NIST and TOGAF documents, and a question bank. If you later want the official course, join ISC2 as a Candidate first: the first year is free and it takes 10% off self-paced training.

Three ways to prepare

Costs below are training only. The exam fee ($599) is the same whichever route you take.

OFFICIALISC2 Official ISSAP training
$595-$2,88090-180 days or 3-day class

ISC2's adaptive self-paced course gives 90 or 180 days with the official ISSAP eTextbook, a study-questions eBook, pre- and post-course assessments, domain quizzes, study sheets and flash cards. The three-day live online class adds an ISC2 authorized instructor, session recordings and 180 days of materials. Both carry ISC2's Education Guarantee: fail on your first attempt and you can retake the same training free within a year.

Best for:Candidates who want the only text written to the 2025 four-domain outline, or whose employer pays for official training.

Watch out:Live classes are rare: the only open session listed in October 2026 is 16-18 Nov, GMT+8. Members get 20% off self-paced, nothing off live.

GUIDED COURSEThird-party ISSAP boot camp
$2,999 (Infosec)4 days + 2-4 weeks review

A four-day live boot camp run by a training company rather than ISC2. Infosec lists $2,999 with an exam voucher, 90 days of class recordings and Infosec Skills access, and pays for a second exam if you fail the first. Training Camp runs a four-day version with the exam sat on site on the last day, but its page shows no price.

Best for:Architects who can clear a week, want the voucher bundled, and prefer one intensive push to months of evening study.

Watch out:Few firms still run ISSAP and dates are limited. Confirm the course teaches the August 2025 four-domain outline, not the old six domains.

SELF-STUDYSelf-study with free ISC2 and NIST material
$0 + question bank8-12 weeks part-time

Use the free 2025 exam outline as your syllabus, then ISC2's free Ultimate Guide, flash cards and knowledge check. Read the free reference documents the domains lean on: NIST SP 800-160, 800-207, 800-63-4, 800-57 and 800-82, plus the TOGAF Standard. Finish with a question bank for timed 125-item practice. This route suits architects already doing the design work.

Best for:Experienced architects (most ISSAP candidates) who use these frameworks at work and mainly need to map them to the outline.

Watch out:There is no current standalone ISSAP book, so you build your own notes per objective. Older guides still teach the retired six-domain layout.

Every option on one price line

7 options for the CISSP-ISSAP, placed by list price. The numbered pins match the table.

#OptionTypeList priceFormat and what you get
1ISSAP Online Self-Paced Training (90-day)ISC2Official$595 / $476 memberAdaptive on-demand course, 90 days of access from purchase. Official eTextbook, study-questions eBook, domain quizzes, flash cards; Education Guarantee retake
2ISSAP Online Self-Paced Training (180-day)ISC2Official$995 / $796 memberAdaptive on-demand course, 180 days of access from purchase. Same content as the 90-day option with twice the access window; exam bundles also sold
3ISSAP Online Instructor-Led TrainingISC2Official$2,880 (no member price)3-day live virtual class; next listed 16-18 Nov 2026, GMT+8. ISC2 authorized instructor, eTextbook, study-questions eBook, recordings, 180-day access, Education Guarantee
4ISSAP Training Boot CampInfosec InstituteThird-party$2,9994-day live online or onsite boot camp. Exam voucher, 90-day recordings, 90-day Infosec Skills access; pays for a second attempt if you fail
5ISSAP Security Architecture Boot CampTraining CampThird-partyNot shown on page4-day boot camp, online or in person, exam sat on site on the last day. $599 exam voucher, free retake voucher and course retake, 180 days of 1-on-1 coaching
6ISSAP (2024) learning pathInfosec SkillsThird-partySubscription (7-day trial)On-demand video, 15 h 15 min across 23 courses, 124-question practice exam. Built on the pre-2025 six-domain outline, so its app-security and SecOps modules no longer match the exam
7ISSAP Ultimate Guide, flash cards and knowledge checkISC2FreeFreeDownloadable guide plus online flash cards and a short quiz. Official overview of the exam and domains, key-term flash cards, and a taste of ISSAP-style questions

Whichever route you pick, test it

A course or a book only proves itself under exam conditions. ExamCert AI has 400+ exam-style CISSP-ISSAP questions with an explanation for every option. Do a mixed set before you pay for anything else.

Practise on ExamCert AIFree CISSP-ISSAP practice test

What a course gives you, and the free substitute

The honest question is not "is the course good?" but "which part of it can I not get for free?" For the CISSP-ISSAP:

A paid course gives youFree or cheap substituteGap left
Official ISSAP eTextbook written to the 2025 four-domain outlineNothing equivalent is sold on its own; use the free outline as your syllabus and NIST SP 800-160, 800-207 and 800-63-4 as textsLarge gap
Live instructor who talks through architecture trade-offsDesign reviews at work, your local ISC2 chapter, or a peer study group that defends designs against each domainPartial
Study-questions eBook, pre/post assessments and domain quizzesISC2's free knowledge check and flash cards, plus an independent ISSAP question bank for timed setsPartial
Framework coverage (SABSA, TOGAF, STRIDE) in one placeTOGAF Standard, 10th Edition (free download for non-commercial use) and free OWASP threat-modeling materialSmall gap
Exam voucher and retake bundled into a boot campBuy the exam from ISC2 for $599, or $798 with Peace of Mind Protection for two attempts within 180 daysSmall gap

Pay or self-study? 3 questions

Answer in order. The first yes decides it.

Q1Is your employer paying and does it want official ISC2 training on record?
Take ISC2's three-day online instructor-led class ($2,880) or the 180-day self-paced course ($995); both are official ISC2 training backed by its Education Guarantee.
NO ↓
Q2Is one of the four domains, such as IAM or infrastructure, outside your day job?
Buy ISC2's 90-day self-paced course ($595, or $476 for members) for its four-domain eTextbook and adaptive quizzes, and self-study the rest.
NO ↓
Q3Do you only study well with a fixed week and a voucher in hand?
A four-day boot camp fits: Infosec lists $2,999 including the exam voucher. Confirm it teaches the 2025 four-domain outline and that the date will run.
NO ↓
ALL NOSelf-study: the free 2025 outline, ISC2's free guide and flash cards, NIST and TOGAF documents and a question bank, then book the $599 exam.

A complete CISSP-ISSAP self-study kit

Everything a self-studier needs, at list price, totalled.

ISSAP Certification Exam Outline, effective 1 August 2025 (ISC2)Your syllabus. Four domains and every sub-objective; check each one off as you can design and defend it.
Free
ISSAP Ultimate Guide, flash cards and knowledge check (ISC2)ISC2's own overview, key terms and sample questions, so you see how the exam frames architecture choices.
Free
NIST SP 800-160 Vol. 1 and SP 800-207 (zero trust)Systems security engineering and zero trust architecture, the backbone of the modeling and infrastructure domains.
Free
NIST SP 800-63-4 and SP 800-57 Part 1Digital identity and key management guidance for the IAM domain (25%) and the cryptography objectives.
Free
NIST SP 800-82 Rev. 3 (OT security)The outline names OT and ICS in the heaviest domain (32%); this is the standard free reference for it.
Free
TOGAF Standard, 10th Edition (The Open Group)Free download after registration for non-commercial use; the outline expects you to know where TOGAF fits.
Free
Self-study kit total: about 1% of the official route's ~$1,738Free

Finish the kit with exam-style practice

Work CISSP-ISSAP questions by domain, see which areas a course would actually have helped with, and spend money only there.

Practise on ExamCert AIFree CISSP-ISSAP practice test

FAQ

Is training required for the ISSAP exam?

No. ISC2 sets no training requirement, and you can buy the US$599 exam directly. The rule people confuse with training is experience: a CISSP plus two years of ISSAP-domain experience, or seven years across two or more domains without one, which ISC2 checks at endorsement after you pass. ISC2 says its self-paced training qualifies for CPE credits, but no course is ever a condition for sitting the exam.

How much does official ISC2 ISSAP training cost?

At US list prices checked in October 2026, the adaptive self-paced course is $595 for 90 days or $995 for 180 days, or $476 and $796 for ISC2 members. ISC2 Candidates pay $536 and $896. The three-day online instructor-led class is $2,880 for everyone. Bundles add the $599 exam, or $798 with Peace of Mind Protection for two attempts.

Is there an up-to-date ISSAP book?

Not as a standalone purchase. ISC2's self-study page lists only the self-paced course, the exam outline and flash cards, and the official ISSAP eTextbook and study-questions eBook come bundled with ISC2 training. The last edition of the Official (ISC)2 Guide to the ISSAP CBK predates the August 2025 outline, so if you use it, map every chapter back to the current four domains.

Can I take ISSAP training before I have a CISSP?

Yes. ISC2's courses are open to anyone, and its self-paced course page describes the ideal learner as someone with at least seven years of work experience in two or more ISSAP domains, which is the no-CISSP route to the credential. Neither the course nor the exam checks your experience; ISC2 verifies it during endorsement, after you pass.

Is an ISSAP boot camp worth the money?

For some people. A four-day boot camp such as Infosec's ($2,999 with an exam voucher) compresses review into one week and gives you a deadline. But ISSAP tests design judgment built over years, which no week of lectures supplies, and few providers still run it. Check that the course follows the 2025 four-domain outline and that the date will actually run before paying.

Sources

Figures on this page come from ISC2 and the other primary sources below:

Checked October 15, 2026. Fees, outlines and eligibility rules change — confirm with ISC2 before you book.