Information Systems Security Management Professional

ISSMP

Information Systems Security Management Professional

Information Systems Security Management Professional (ISSMP)

Overview

The Information Systems Security Management Professional (ISSMP) certification is designed for experienced cybersecurity professionals who want to demonstrate their expertise in managing information security programs. Offered by ISC2, this certification validates an individual’s ability to establish, present, and govern information security programs, as well as their deep management and leadership skills across critical security functions.

The certification validates an individual’s ability to:

  • Establish, present, and govern information security programs.
  • Demonstrate leadership skills in managing critical security functions.
  • Provide risk-based guidance and security planning for organizations.

Course Details

The ISSMP certification encompasses six domains that cover essential aspects of information security management.

Topics Covered:

  • Leadership and Business Management: Applying leadership principles to manage information security programs.
  • Systems Lifecycle Management: Managing security throughout the system development lifecycle.
  • Risk Management: Techniques for identifying, assessing, and mitigating risks in information systems.
  • Threat Intelligence and Incident Management: Developing strategies for threat intelligence gathering and incident response.
  • Contingency Management: Planning for business continuity and disaster recovery.
  • Law, Ethics, and Security Compliance Management: Ensuring compliance with legal and regulatory requirements.

Learning Materials:

Participants will have access to a variety of resources, including official training materials, practice exams, and community support from experienced security managers.

Exam Structure

The ISSMP certification is awarded upon successful completion of the exam that assesses knowledge across the covered domains.

Key Exam Requirements:

  • A minimum of five years of cumulative paid work experience in one or more of the six domains of the ISSMP Common Body of Knowledge (CBK).
  • The exam consists of multiple-choice questions covering all domains.

Who Should Take ISSMP?

The ISSMP certification is ideal for:

  • Cybersecurity managers responsible for overseeing information security programs.
  • Risk management specialists aiming to enhance their understanding of security management principles.
  • Security operations specialists looking to integrate management considerations into operational practices.

Resources