ISSMP®: Information Systems Security Management Professional

ISSMP

The ISSMP certification is a high-level information security career path that validates the knowledge, skills, and abilities required by information systems security managers to design, conduct, and advise on information security programs.

Focus

The ISSMP®: Information Systems Security Management Professional certification focuses on Information Security Management

Exam Duration

The ISSMP®: Information Systems Security Management Professional exam duration is A maximum of 210 minutes (3 hours and 30 minutes)

Num of Question

The exam contains a total of 145

Exam Fee

The exam fee is 300 USD.

Exam Validity

The CCRN-Pediatric certification is valid for The ISSMP certification is valid for 3 years.

Prior Certification

• ISC2 ISSMP certification builds on the Associate-level knowledge and skills acquired in the ISSAP and CISSP certifications.

Exam Format

The ISSMP®: Information Systems Security Management Professional exam is a Multiple-choice, Fill-in-the-Blank, Hands-on Exercises, Essay questions, and/or Case studies

Passing Conditions

To pass ISSMP®: Information Systems Security Management Professional exam, applicants must achieve a minimum score of Passing score is 700 (on a scale of 100 to 800)

Who Should Take

Prerequisites

A minimum of 5 years of experience in 2 or more of the 8 domains of the CISSP-ISSMP CBK, in addition to one year of experience in 3 or more of the remaining domains.

Or can substitute with certifications:

• Graduation from an accredited four-year degree program in one of the eight CISSP CBK areas, and a minimum of 7 years of industrial work experience in a properly documented pathway, with no less than 3 years in one or more of the 6 domains requiring 3 years minimum, and 4 years or more in the remaining two domains.

Certification Process

Domains with Weights

• Risk Management Concepts and Enterprise Risk Management (13%): This domain addresses the concepts, methods and procedures for identifying, managing and mitigating risk for information systems security threats.
• Risk-Based Management of Information Systems Security (16%): This domain addresses the concepts, methods and procedures for implementing risk-based management principles for managing and mitigating risk for information systems security threats.
• Information Security Governance (ISG) (8%): This domain addresses the concepts, methods and procedures for implementing information security governance (ISG) principles.
• Program Management for Ongoing Communications Network Security (8%): This domain addresses the concepts, methods and procedures for ongoing communications network security management and implementation within the enterprise.
• Network Security and Disaster Recovery Planning (10%): This domain addresses the concepts, methods and procedures in network security and disaster recovery planning.
• Business Continuity Planning (8%): This domain addresses the concepts, methods, and procedures in business continuity planning.