- Establish security’s role in organizational culture, vision, and mission and align the program with governance.
- Define and implement security strategies and maintain the security policy framework.
- Manage security requirements in contracts, awareness and training programs, metrics, budgets, and security teams.
- Apply product development and project management principles to security work.
ISC2 Certification Training Course
ISC2 ISSMP® Information Systems Security Management Professional Certification Training Course
Build the security leadership expertise that enterprise programs need with Accumentum’s ISC2 ISSMP® Information Systems Security Management Professional Certification Training Course, developed to help you establish, present, and govern information security programs.
Course focus: Leadership and organizational management, systems lifecycle management, risk management, security operations, contingency management, and law, ethics, and security compliance management.
Course Overview
Master the six ISSMP domains.
The ISC2 ISSMP® Information Systems Security Management Professional Certification Training Course with Accumentum gives you a complete look at the ISSMP concentration. An ISSMP is a security leader who establishes, presents, and governs information security programs and directs their alignment with the organization’s mission, goals, and strategies. This course covers the six domains of the ISSMP exam outline effective August 1, 2025: Leadership and Organizational Management, Systems Lifecycle Management, Risk Management, Security Operations, Contingency Management, and Law, Ethics, and Security Compliance Management. You work through budgeting, metrics, policy frameworks, threat intelligence, incident management, and continuity planning, along with the AI governance topics the updated outline adds. You leave ready to sit the ISSMP exam and to lead security programs at the enterprise level.
Course Benefits
Build ISSMP certification readiness and real-world capability.
01
Security Program Leadership
Define security vision and strategy, build the policy framework, manage budgets, and report on metrics that matter to leadership.
02
Lifecycle and Risk Management
Integrate security across the system lifecycle and run risk, vulnerability, and supply chain risk programs.
03
Security Operations Oversight
Establish the SOC, threat intelligence program, and incident management program.
04
Continuity, Law, and Compliance
Lead contingency and recovery planning, apply the ISC2 Code of Ethics, and coordinate with auditors and regulators.
Who Should Attend
- CISSPs moving into security management, CISO, or director roles.
- Security managers responsible for programs, budgets, teams, and metrics.
- Leaders who oversee security operations, incident management, and continuity planning.
- Experienced cybersecurity professionals seeking the ISC2 ISSMP concentration to prove management and leadership expertise.
Prerequisites
- Candidates must be a CISSP in good standing and have two years cumulative, full-time experience in one or more of the six domains of the current ISSMP outline.
- Or have a minimum of seven years cumulative, full-time experience in two or more of the ISSMP domains. A qualifying degree or an approved credential may satisfy one year, and only one year can be waived.
- Familiarity with security governance, risk management, and program management concepts.
- Willingness to engage with leadership and business scenarios in preparation for the ISSMP exam.
Pathway Map
The ISSMP training course spans the six official ISC2 exam domains.
The curriculum covers Leadership and Organizational Management (21%), Systems Lifecycle Management (15%), Risk Management (20%), Security Operations (18%), Contingency Management (12%), and Law, Ethics, and Security Compliance Management (14%).
Course Content
- Integrate security decision points and controls throughout the system life cycle.
- Bring organizational initiatives and emerging technologies into the security architecture.
- Run vulnerability management programs and manage the security aspects of change control.
- Develop and manage a risk management program, from risk appetite to treatment options and reporting.
- Manage security risks within the supply chain.
- Conduct risk assessments and manage risk controls.
- Establish and maintain a security operations center.
- Establish and maintain a threat intelligence program, including threat modeling and actionable alerts.
- Establish and maintain an incident management program, including investigations and root cause analysis.
- Facilitate development of contingency, COOP, business continuity, and disaster recovery plans.
- Develop recovery strategies and assign recovery roles.
- Maintain contingency plans and manage the disaster response and recovery process.
- Identify the impact of laws and regulations, including trans-border data flow and intellectual property.
- Understand, adhere to, and promote the ISC2 Code of Ethics.
- Validate compliance, coordinate with auditors and regulators, and document compliance exceptions.
Course Features
Designed for practical training and ISSMP exam preparation.
Interactive Learning
Participate in training sessions, discussions, and applied exercises with experienced instructors.
Comprehensive Study Materials
Access extensive resources, including e-books, video lectures, and practice exams.
Real-World Applications
Engage in practical exercises and case studies to apply ISSMP concepts.
Certification Preparation
Receive guidance and tips to successfully prepare for the ISC2 ISSMP® Information Systems Security Management Professional Certification exam.
Certification Exam
Prepare for the official ISC2 ISSMP certification exam.
ISSMP Exam Readiness
Accumentum’s ISSMP Training Course prepares learners to apply the six ISSMP domains in real work and on exam day.
Upon completing the ISC2 ISSMP® Information Systems Security Management Professional Certification Training Course with Accumentum, you will be equipped to pursue the Information Systems Security Management Professional (ISSMP) exam. The official exam is 3 hours, includes 125 items in multiple choice and advanced item types format, and requires a passing grade of 700 out of 1000 points. It is offered in English at Pearson VUE testing centers. CISSP-ISSMP is listed in the DoD 8140 Foundational Qualification Matrix V2.1 (effective September 19, 2025), so it can support qualification for applicable DoD cyber workforce roles. Confirm your work role and proficiency level with your supervisor. ISSMP shows that you can lead security as a business function, which supports CISO, security director, and program management roles across government and industry.
Exam Outline
The full ISSMP exam outline.
This is the official ISC2 ISSMP exam outline effective August 1, 2025: 6 domains and 30 objectives, in ISC2's own wording. Our course maps lessons and practice to each one.
Domain 1: Leadership and Operational Management
Average weight 21%
- 1.1 Establish security’s role in organizational culture, vision, and mission
- 1.2 Align security program with organizational governance
- 1.3 Define and implement information security strategies
- 1.4 Define and maintain security policy framework
- 1.5 Manage security requirements in contracts and agreements
- 1.6 Manage security awareness and training programs
- 1.7 Define, measure, and report security metrics
- 1.8 Prepare, obtain, and manage security budget
- 1.9 Manage security programs
- 1.10 Apply product development and project management principles
Domain 2: Systems Lifecycle Management
Average weight 15%
- 2.1 Manage integration of security throughout system life cycle
- 2.2 Integrate organization initiatives and emerging technologies throughout the security architecture
- 2.3 Define and manage comprehensive vulnerability management programs (for example vulnerabilities, scanning, penetration testing, threat analysis)
- 2.4 Manage security aspects of change control
Domain 3: Risk Management
Average weight 20%
- 3.1 Develop and manage a risk management program
- 3.2 Manage security risks within the supply chain (for example supplier, vendor, third-party risk, contracts)
- 3.3 Conduct risk assessments
- 3.4 Manage risk controls
Domain 4: Security Operations
Average weight 18%
- 4.1 Establish and maintain security operations center
- 4.2 Establish and maintain threat intelligence program
- 4.3 Establish and maintain incident management program
Domain 5: Contingency Management
Average weight 12%
- 5.1 Facilitate development of contingency plans
- 5.2 Develop recovery strategies
- 5.3 Maintain contingency plan, resiliency plan (for example Continuity of Operations Plan (COOP)), business continuity plan (BCP) and disaster recovery plan (DRP)
- 5.4 Manage disaster response and recovery process
Domain 6: Law, Ethics and Security Compliance Management
Average weight 14%
- 6.1 Identify the impact of laws and regulations that relate to information security
- 6.2 Understand, adhere to, and promote professional ethics
- 6.3 Validate compliance in accordance with applicable laws, regulations, and industry standards
- 6.4 Coordinate with auditors and regulators in support of internal and external audit processes
- 6.5 Document and manage compliance exceptions
Exam Facts
How the ISSMP exam works.
Format
- Length of exam: 3 hours
- Number of items: 125
- Item format: Multiple choice and advanced item types
- Passing grade: 700 out of 1000 points
- Exam language availability: English
Domain weights
- Leadership and Organizational Management, 21%
- Systems Lifecycle Management, 15%
- Risk Management, 20%
- Security Operations, 18%
- Contingency Management, 12%
- Law, Ethics, and Security Compliance Management, 14%
Requirements
Experience and upkeep for ISSMP.
ISSMP is a CISSP concentration. ISC2 lists the experience requirement as CISSP plus two years, or seven years cumulative.
Once certified, ISC2 requires continuing professional education (CPE) credits and an Annual Maintenance Fee to keep the credential active.
Study Plan
A practical path to ISSMP.
We start with the domain map. ISSMP has 6 domains, and the heaviest is Leadership and Organizational Management (21%). It gets the longest blocks and the most practice questions.
Each domain follows the same pattern. We teach the concepts, walk through a scenario, then work questions in the ISC2 style, where more than one answer looks right and you pick the best one for the situation.
Expect advanced item types as well as multiple choice. We practice those formats so the question style isn't new on test day.
The last stretch is review. You take a full length practice exam under the real time limit, then we go back over the domains where you dropped points.
Career Outlook
Where ISSMP can take you.
ISSMP is for people who lead security programs. Titles include CISO, security director, security program manager and ISSM.
Per the U.S. Bureau of Labor Statistics, computer and information systems managers earned a median annual wage of $175,140 in May 2025. A median is the midpoint, so half earned more and half earned less, and your own pay will depend on location, experience and employer. Source: BLS Occupational Outlook Handbook.
Funding and PathPay
Ways to pay for ISSMP training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're serving, start with your education center and read our Army CA and Air Force COOL pages for the steps.
Paying on your own? ISSMP prep is eligible for PathPay, our monthly payment plan. Terms of 3, 4 and 6 months carry no added fee. 9, 12 and 18 month terms add 5%, 10% and 15%. Course access opens when your first payment clears.
Our funding page has every other option, and you can talk with us or email info@accumentum.net before you enroll.
Frequently Asked Questions
Understand how Accumentum’s ISC2 ISSMP® Information Systems Security Management Professional Certification Training Course supports certification preparation, eligibility, course content, delivery, and career advancement.
Information Systems Security Management Professional (ISSMP) is an ISC2 concentration. An ISSMP is a security leader who establishes, presents, and governs information security programs and directs their alignment with the organization’s mission, goals, and strategies.
CISSPs moving into security management, CISO, or director roles. Security managers responsible for programs, budgets, teams, and metrics. Leaders who oversee security operations, incident management, and continuity planning. Experienced cybersecurity professionals seeking the ISC2 ISSMP concentration to prove management and leadership expertise.
Candidates must be a CISSP in good standing and have two years cumulative, full-time experience in one or more of the six domains of the current ISSMP outline. Or have a minimum of seven years cumulative, full-time experience in two or more of the ISSMP domains. A qualifying degree or an approved credential may satisfy one year, and only one year can be waived.
The curriculum covers the six official ISSMP domains: Leadership and Organizational Management, Systems Lifecycle Management, Risk Management, Security Operations, Contingency Management, and Law, Ethics, and Security Compliance Management.
Yes. Accumentum’s ISSMP Training Course is designed to prepare you for the official ISC2 ISSMP certification exam and the competencies it assesses.
Yes. Participate in training sessions, discussions, and applied exercises with experienced instructors. Engage in practical exercises and case studies to apply ISSMP concepts.
Access extensive resources, including e-books, video lectures, and practice exams.
Six domains, with weights of 21%, 15%, 20%, 18%, 12%, and 14% respectively, per the ISC2 ISSMP Certification Exam Outline effective August 1, 2025.
Accumentum is an Army CA and Air Force COOL Approved Vendor for ISC2. Talk with our team to confirm eligibility for your branch and credential before you enroll.
Enroll in the ISC2 ISSMP® Information Systems Security Management Professional Certification Training Course with Accumentum via Accumentum’s registration page linked below, or explore PathPay Enrollment options.
ISSMP shows that you can lead security as a business function, which supports CISO, security director, and program management roles across government and industry.
ISC2 lists the exam at 3 hours with 125 items.
ISC2 sets the passing grade at 700 out of 1000 points.
ISC2 publishes these average weights:
- Leadership and Organizational Management, 21%
- Systems Lifecycle Management, 15%
- Risk Management, 20%
- Security Operations, 18%
- Contingency Management, 12%
- Law, Ethics, and Security Compliance Management, 14%
Leadership and Organizational Management carries the most weight at 21%.
ISSMP is a CISSP concentration. ISC2 lists the experience requirement as CISSP plus two years, or seven years cumulative.
Once certified, ISC2 requires continuing professional education (CPE) credits and an Annual Maintenance Fee to keep the credential active.
Accumentum is an Army CA and Air Force COOL Approved Vendor. Start with your education center, and we'll help with the rest.
Yes. ISSMP prep is eligible for PathPay. Terms of 3, 4 and 6 months add no fee. 9, 12 and 18 month terms add 5%, 10% and 15%.
Enrollment
Enroll in the ISC2 ISSMP® Certification Training Course with Accumentum.
Enroll in the ISC2 ISSMP® Information Systems Security Management Professional Certification Training Course with Accumentum to advance your expertise and earn a globally recognized ISC2 concentration. Accumentum is an Army CA and Air Force COOL Approved Vendor, and our team can walk you through funding options before you register.
Advance your cybersecurity career with ISSMP training.
Prepare for the ISC2 ISSMP certification exam and build the leadership and organizational management and law, ethics, and security compliance management skills that employers look for.