Security Manager Program. Lead the security program, not only the tools.
Expert-led instruction
Why this path
The certs security leaders get asked for
Security+ sets the technical base. CISM is ISACA's management cert, focused on governance, risk and running a program. CISSP is ISC2's broad cert that shows up on manager, architect and CISO job posts.
Technical base
Security+ makes sure you speak the same language as the engineers you'll lead.
Management focus
CISM covers governance, risk management, program development and incident management.
Broad authority
CISSP covers eight domains, from risk and architecture to operations and software security.
Sources: CompTIA, ISACA and ISC2 certification pages, checked October 2026. Accumentum is a CompTIA Authorized Partner.
Pathway map
Your three steps to Security Manager / Leader
Take the full program or start at the step that fits what you already know. Each course also stands on its own.
Step 1: Know the technical basics
CompTIA Security+ (SY0-701)
You understand threats, vulnerabilities and the controls that stop them. Identity and access, secure architecture, incident response basics and risk.
Roles it opensSecurity administrator, security analyst, IT security specialist
The examUp to 90 questions, 90 minutes
Passing score750 of 900
Step 2: Manage the program
ISACA CISM (CISM)
You can run an information security program. Governance, risk management, program development and management, and incident management.
Roles it opensInformation security manager, ISSM, security program manager
The exam150 questions, 240 minutes
Passing score450 (scaled 200 to 800)
Step 3: Lead across every domain
ISC2 CISSP (CISSP (CAT))
You can design, run and manage security across an organization. Risk, assets, architecture, network security, identity, testing, operations and software security.
Roles it opensSecurity manager, security architect, director of security, CISO
The exam100 to 150 questions, 180 minutes
Passing score700 of 1,000
Exam facts
The three exams at a glance
| Cert | Exam code | Questions | Time | Passing score |
|---|---|---|---|---|
| Security+ | SY0-701 | Up to 90 | 90 minutes | 750 of 900 |
| CISM | CISM | 150 | 240 minutes | 450 (scaled 200 to 800) |
| CISSP | CISSP (CAT) | 100 to 150 | 180 minutes | 700 of 1,000 |
Figures from CompTIA, ISACA and ISC2 exam pages, October 2026. Security+ V8 (SY0-801) is expected around November 17, 2026. CISSP uses adaptive testing in English. Confirm details on the vendor sites before you schedule.
DoD 8140
Work roles this pathway supports
These certs are listed for the management and assessment work roles below under DoDM 8140.03.
Information Systems Security Manager (722)
CISM and CISSP
Security Control Assessor (612)
Security+, CISM and CISSP
Sources: ISACA and ISC2 DoD 8140 announcements, CompTIA work role alignment and the DoD 8140 Foundational Qualification Matrix V2.1, checked October 2026. Proficiency levels vary, so ask us about your billet.
Funding
Using military education benefits?
Accumentum is an Army CA and Air Force COOL Approved Vendor. Tell us your branch and we'll show you what applies to each step.
Tell us where you are and we'll map out your pathway
Where to start, how long it should take you and whether funding applies. You'll hear back from a real person, usually within one business day. Prefer email? info@accumentum.net
Thanks, it's in.
We'll reach out shortly with your Security Manager / Leader plan. Want to skip ahead? You can register now.
Go to RegistrationFAQ
Questions people ask before they start
Do I need management experience?
Not to start. Security+ is open to anyone. CISM and CISSP have experience rules for the full credential, so we'll look at your background when we map your plan.
What experience do CISM and CISSP require?
ISACA asks for five years of security work for CISM, with three in management. ISC2 asks for five years in two or more CISSP domains. You can pass the exams first and earn the experience after.
Can I skip Security+?
Yes, if you already hold it or have years in security. Each course stands on its own.
CISM or CISSP first?
We put CISM second because its four domains are narrower and focused on management. CISSP covers more ground, so it works well as the last step. If your job or contract names CISSP, we can switch the order.
Can I use military education benefits?
Yes. Accumentum is an Army CA and Air Force COOL Approved Vendor. Tell us your branch and we'll walk you through what applies to each course in the pathway.
How long does the whole pathway take?
It depends on your experience and test dates. An advisor will map each step to your schedule and work hours.
Ready to lead security?
Tell us where you're starting and we'll build the schedule with you.
CompTIA and Security+ are trademarks of CompTIA, Inc. CISM is a trademark of ISACA. CISSP is a registered mark of ISC2, Inc.