CISSP-ISSEP: Information Systems Security Engineering Professional

The IATF Information Systems Security Engineering model defines three related principles: keep the problem and solution spaces separate; base the problem space on the customer’s mission or business needs; and have the systems engineer and information systems security engineer define a solution space that is driven by that problem space. The statement about the degree to which implemented security meets security needs is not one of these problem-and-solution-space principles.