ISSMP (Information Systems Security Management Professional)
The ISSMP is for security leaders who establish, present and govern information security programs and align them with the organization's mission, finances and risk position. Its domains span leadership, systems lifecycle management, risk, security operations, contingency planning and compliance.
Exam Details
Fixed-length English exam with multiple choice and advanced item types at Pearson VUE test centers.
Standard registration in the Americas, Asia Pacific, Middle East and Africa. ISC2 also lists EUR 575.04 for EMEA and GBP 485.19 for the UK. Currency and taxes depend on the exam location.
Requirements and Renewal
Prerequisites
Either an active CISSP plus two years of cumulative, full-time experience in one or more of the six ISSMP domains, or seven years of cumulative, full-time experience in two or more of them (a degree or approved credential can waive one year). A passing candidate without the experience can hold Associate of ISC2 status for up to eight years.
Renewal
Without a CISSP, 140 Group A CPE credits per three-year cycle. Holders who also have a CISSP earn ISSMP-related Group A credits that ISC2 counts toward the CISSP requirement. A single U.S. $135 annual maintenance fee covers all ISC2 certifications held.
Current Version
ISSMP Exam Outline effective August 1, 2025, in effect since Aug 1, 2025.
Exam Domains
6 domains| Domain | Weight |
|---|---|
| Leadership and Organizational Management | 21% |
| Systems Lifecycle Management | 15% |
| Risk Management | 20% |
| Security Operations | 18% |
| Contingency Management | 12% |
| Law, Ethics, and Security Compliance Management | 14% |
DoD 8140 Work Roles
3 work rolesThe DoD 8140 Qualification Matrix V2.1 lists ISSMP as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Certification Lists
Related Tool Categories
Frequently Asked Questions
Is the ISSMP only for CISSP holders?→
No. Candidates can qualify with a CISSP plus two years of relevant experience, or with seven years of cumulative experience in two or more ISSMP domains.
How many CPE credits does the ISSMP need?→
Holders without a CISSP need 140 Group A CPE credits per three-year cycle. For CISSP holders, ISSMP-related Group A credits count toward the 120 credits the CISSP already requires.
How much does the ISSMP exam cost?→
ISC2 lists U.S. $599 for standard registration, EUR 575.04 in EMEA and GBP 485.19 in the UK.
Sources
- ISSMP - Information Systems Security Management Professional
- ISSMP Certification Exam Outline
- ISC2 Updates Advanced Certifications ISSAP, ISSEP, ISSMP
- ISC2 Cybersecurity Certifications
- ISC2 Exam Pricing
- ISC2 Member Policies (CPE requirements)
- ISC2 Annual Maintenance Fees (AMF)
- Become an Associate of ISC2
- ISC2 Certification Maintenance Handbook
Exam details are checked against official ISC2 pages. Fees, exam versions, and renewal rules change; confirm with ISC2 before registering. ISSMP is a trademark of its owner. This site is not affiliated with or endorsed by ISC2.