CISSP-ISSMP Certified Information Systems Security Management Professional
Prove your knowledge and leadership skills with the CISSP-ISSMP.
(ISC)² offers a number of additional certifications known as CISSP concentrations that build on the CISSP Certification. These are optional certifications for CISSPs who wish to improve their subject matter mastery. The CISSP Concentrations recognize your evolving expertise in information security architecture, engineering or management.
The CISSP-ISSMP cybersecurity management certification shows you excel at establishing, presenting and governing information security programs. You also demonstrate deep management and leadership skills whether you’re leading incident handling and/or a breach mitigation team.
About the exam
The exam is an MCQ with 125 questions based on the following 6 areas of skills:
- Leadership and Business Management (22%)
- Systems Lifecycle Management (19%)
- Risk Management (18%)
- Threat Intelligence and Incident Management (17%)
- Contingency Management (10%)
- Law, Ethics, and Security Compliance Management (14%)
Candidates have 3 hours to take this exam in a Pearson Vue testing center.
(ISC)² recommends candidates review their exam policies and procedures prior to registering for the examination.
Prerequisites
Candidates must be a CISSP in good standing and have 2 years cumulative paid full-time work experience in 1 or more of the 6 domains of the CISSP-ISSMP CBK.
Recommended Training Course
| CISSP-ISSMP | CISSP-ISSMP Certification Preparation |
Download the CISSP-ISSMP Exam Outline
Recertification
Once you have passed your CISSP-ISSMP exam and are certified, you need to recertify every three years, by:
- Earning 20 Continuing Professional Education (CPE) credits each year. (You may apply these 20 credits toward your CISSP CPE requirement as long as these credits are specific to security management.)
- Paying an Annual Maintenance Fee (AMF), in addition to the fee required for the CISSP.
