thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ISC2 · Cybersecurity · Expert

ISC2 CISSP-ISSMP (Management) exam guide

Exam ISSMP

CISSP-ISSMP (Information Systems Security Management Professional) proves you can lead and run a security program: leadership, lifecycle management, risk, operations, contingency planning and compliance. It is aimed at security managers and aspiring CISOs who already hold CISSP.

Questions125
Time limit180 minutes
Passing score700 (0-1000 scale)
Exam fee$599 USD
Valid for3 years
DeliveryPearson VUE test center

Format: Multiple choice and advanced item types.

Who it's for

CISSP holders managing security teams or programs, such as security managers, directors and CISOs.

What the exam covers

Leadership and Operational Management21%
Risk Management20%
Security Operations18%
Systems Lifecycle Management15%
Law, Ethics and Security Compliance Management14%
Contingency Management12%

Eligibility & prerequisites

Required: Active CISSP plus two years of cumulative full-time experience in one or more ISSMP domains.

Recommended: Experience leading security programs, budgets, teams and incident or continuity planning.

Keeping it active

Three-year cycle tied to your CISSP: at least 20 CPE credits in the concentration area per cycle (these count toward CISSP's 120), and the CISSP annual maintenance fee. CISSP must stay active.

Skills & careers

Skills it validates

  • Building and leading a security program and team
  • Aligning security strategy with business goals and budgets
  • Enterprise risk management
  • Overseeing security operations and incident management
  • Business continuity and disaster recovery planning
  • Managing legal, regulatory and ethical compliance

Job roles

Information Security ManagerCISODirector of SecuritySecurity Program ManagerIT Risk ManagerSecurity Operations Manager

DoD 8140

Historically approved for DoD 8570 IAM III; listed in the DoD 8140 matrix for cybersecurity management work roles. Confirm on the DoD CWQ site. Open the DoD Workforce Navigator

Where it fits in your path

Take before

ISC2 CISSP

You are here

ISC2 CISSP-ISSMP (Management)

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Read the ISSMP outline (effective August 2025) and note the six domains.
  2. Week 2-3: Leadership, governance and lifecycle management; program metrics and budgeting.
  3. Week 4: Risk management and security operations management.
  4. Week 5: Contingency planning (BCP/DR) and law, ethics and compliance.
  5. Week 6-7: Timed practice exams; review missed questions by domain.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Answer as a senior manager: governance, business alignment and process beat technical fixes.
  • Leadership and risk together are over 40% of the exam.
  • Know BCP/DR terms (RTO, RPO, MTD) and the order of plan development.
  • Expect questions on managing people and vendors, not just technology.

Frequently asked questions

How much does ISSMP cost?

$599 in the Americas.

Is ISSMP worth it?

For CISSPs moving into management it signals leadership depth; CISM and CCISO are common alternatives.

ISSMP vs CISM?

CISM does not require CISSP and is more widely requested; ISSMP builds directly on CISSP.

Does ISSMP need separate CPEs?

At least 20 CPEs per three-year cycle must be in the ISSMP area; they count toward your CISSP total.

When did the outline change?

A new outline took effect 1 August 2025.

Official page: www.isc2.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.