ISSEP case studies
ISSEP · Put your knowledge to work in context.
The ISSEP (Information Systems Security Engineering Professional) is an ISC2 concentration credential that recognises the ability to apply engineering principles and processes to develop secure systems. ISC2 states it was developed in conjunction with the U.S. The ISSEP case studies are 5 cases and about 3,890 words.
1Traceability Gap at a Preliminary Design Review
Program Atlas is replacing a 12-year-old warehouse management system for a defense logistics agency. The acquisition has three increments over 14 months; Increment 1, covering receiving and inventory, is at its preliminary design review.
818 words, about 4 min2Equivalence Claim in a Managed Detection and Response Procurement
A state health exchange is procuring managed detection and response for 4,000 endpoints across three sites under a three-year contract valued at about 2.1M. The request for proposals lists two mandatory requirements: all telemetry and case data must remain within the country, and the service must meet the state's 'Moderate' control baseline, defined by reference to a published framework but not mapped in the RFP.
777 words, about 4 min3Critical VPN Vulnerability During Enrollment Peak
A federal HR system holds personally identifiable information for 48,000 employees and has an authorization to operate that expires in five months. The risk register lists 132 risks, 9 rated high; three high risks are past their plan-of-action-and-milestones dates.
770 words, about 4 min4Cross-Agency Case Search Versus Tenant Key Custody
A shared-services provider is building a multi-tenant case-management platform for 12 regulatory agencies. Tenant data must be encrypted with customer-managed keys held in each agency's own key service, and each agency's data must remain in its own region.
800 words, about 4 min5NAC Rollout With Life-Critical Medical Devices
A hospital network is deploying 802.1X network access control to 6,000 managed endpoints and 400 medical devices across five campuses. The pilot on two floors showed that 12% of devices fail supplicant authentication, including infusion pumps and a legacy nurse-call gateway.
725 words, about 4 min