Overview
ISSMP: Information Systems Security Management Professional is a ISC2 credential. Prepare for the ISC2 ISSMP concentration covering security leadership, risk, operations, and compliance across six exam domains. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISC2 exam. ISC2 sets exam content, fees, and policies.
Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISC2 exam. ISC2 sets exam content, fees, and policies.
Who it is for
- CISSPs moving into security management, CISO, or director roles.
- Security managers responsible for programs, budgets, teams, and metrics.
- Leaders who oversee security operations, incident management, and continuity planning.
Exam domains
Weights follow the official outline.
- 01
Leadership and Organizational Management
Establish security’s role in organizational culture, vision, and mission and align the program with governance, Define and implement security strategies and maintain the security policy framework, and Manage security requirements in contracts, awareness and training programs, metrics, budgets, and security teams.
- 02
Systems Lifecycle Management
Integrate security decision points and controls throughout the system life cycle, Bring organizational initiatives and emerging technologies into the security architecture, and Run vulnerability management programs and manage the security aspects of change control.
- 03
Risk Management
Develop and manage a risk management program, from risk appetite to treatment options and reporting, Manage security risks within the supply chain, and Conduct risk assessments and manage risk controls.
- 04
Security Operations
Establish and maintain a security operations center, Establish and maintain a threat intelligence program, including threat modeling and actionable alerts, and Establish and maintain an incident management program, including investigations and root cause analysis.
- 05
Contingency Management
Facilitate development of contingency, COOP, business continuity, and disaster recovery plans, Develop recovery strategies and assign recovery roles, and Maintain contingency plans and manage the disaster response and recovery process.
- 06
Law, Ethics, and Security Compliance Management
Identify the impact of laws and regulations, including trans-border data flow and intellectual property, Understand, adhere to, and promote the ISC2 Code of Ethics, and Validate compliance, coordinate with auditors and regulators, and document compliance exceptions.
Exam format and cost
- Questions
- Confirm on the vendor site
- Duration
- Confirm on the vendor site
- Format
- Multiple choice and related item types (confirm on the vendor outline)
- Passing score
- Confirm the passing score on the vendor site
- Cost
- Confirm the current exam fee on the vendor site before you register
- Delivery
- Pearson VUE test center or online where the vendor offers it
- Languages
- Confirm available languages on the vendor site
Experience and eligibility
Candidates must be a CISSP in good standing and have two years cumulative, full-time experience in one or more of the six domains of the current ISSMP outline. Or have a minimum of seven years cumulative, full-time experience in two or more of the ISSMP domains. A qualifying degree or an approved credential may satisfy one year, and only one year can be waived.
Renewal
Renewal rules for ISSMP: Information Systems Security Management Professional are set by ISC2. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.
Roles this credential fits
- Leadership and organizational management, systems lifecycle management, risk management, security operations, contingency management, and law, ethics, and security compliance management.
- Security Management
- Teams standardizing on this credential for hiring or compliance
ISSMP questions
Is ISSMP worth it?
ISSMP is worth it when employers or contracts in your market ask for ISC2 proof, or when the domains match work you already do or want next. Common roles include Leadership and organizational management, systems lifecycle management, risk management, security operations, contingency management, and law, ethics, and security compliance management., Security Management, and Teams standardizing on this credential for hiring or compliance. Read the roles and domains on this page, then decide against your timeline and budget.
How hard is ISSMP?
You get Confirm on the vendor site in Confirm on the vendor site. Format: Multiple choice and related item types (confirm on the vendor outline). Passing score: Confirm the passing score on the vendor site. Delivery: Pearson VUE test center or online where the vendor offers it. Candidates must be a CISSP in good standing and have two years cumulative, full-time experience in one or more of the six domains of the current ISSMP outline. People who pass usually mix domain study with timed practice, not reading alone.
Does ISSMP expire?
Renewal rules for ISSMP: Information Systems Security Management Professional are set by ISC2. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.
How does Accumentum help with ISSMP?
We offer Expert-led training mapped to the ISSMP domains, PathPay® payment options, PathPass™ practice where the exam is in our catalog, and military funding support where you qualify. We are an Army CA and Air Force COOL Approved Vendor. Our pass rate across Accumentum certification attempts since August 2022 is 98.8% (2,412 certified of about 2,441 attempts).
How much does the ISSMP exam cost?
Published pricing for ISSMP: Confirm the current exam fee on the vendor site before you register. Vendors change voucher prices without notice, so confirm on the official store before you buy. PathPay® can spread Accumentum course tuition when you train with us.
What are the ISSMP prerequisites?
Candidates must be a CISSP in good standing and have two years cumulative, full-time experience in one or more of the six domains of the current ISSMP outline. Or have a minimum of seven years cumulative, full-time experience in two or more of the ISSMP domains. A qualifying degree or an approved credential may satisfy one year, and only one year can be waived.
What should I take after ISSMP?
After ISSMP, pick the next credential that matches the job you want, not a generic ladder. Use the roles on this page and neighboring PathKey™ guides from the same vendor to plan the sequence. If you need a readiness check first, start with ReadyScore™ when we offer one for this exam.
Official sources
Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.