ISC2

Information Systems Security Management Professional

ISSMP · active

Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data. Salary premiums are estimates, not a promise of a raise.

Add to My Portfolio
Exam cost
Not verified
Questions · time · passing score
125 questions · 180 minutes · Pass: 700/1000
Prerequisites
Active CISSP plus 2 years relevant experience, or 7 years relevant experience in at least two domains; eligible degree or credential may waive one year on the latter route.
Estimated salary premium
Not established by comparable evidence
Renewal requirements
Not verified in this audit; confirm with issuer.
Difficulty
Not rated

Domains covered

  • Leadership and organizational management (21%)
  • Systems lifecycle management (15%)
  • Risk management (20%)
  • Security operations (18%)
  • Contingency management (12%)
  • Law, ethics and compliance (14%)

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

Compare this certification

Recent catalog changes

  1. ISC2exam update

    Information Systems Security Management Professional

    Information Systems Security Management Professional: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    125 questions, 3 hours, multiple choice and advanced item types, 700 out of 1000 points passing score
    After
    125 items; 180 minutes; multiple choice and advanced items; pass 700/1000.
    Review source
  2. ISC2updated

    Information Systems Security Management Professional

    Information Systems Security Management Professional: abbreviation. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    CISSP-ISSMP
    After
    ISSMP
    Review source
  3. ISC2domain change

    Information Systems Security Management Professional

    Information Systems Security Management Professional: skills gained. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    ** Information security program vision and mission definition · Organizational governance alignment · Information security strategy implementation · Security policy framework management · Contractual security requirements management · Security awareness and training program management · Security metrics definition and reporting · Security budget preparation and management · Security program management · Product development and project management principles application · Systems lifecycle security integration · Vulnerability management program definition · Change control security management · Risk management program development · Supply chain security risk management · Risk assessments · Risk controls management · Security operations center establishment · Threat intelligence program establishment · Incident management program establishment · Contingency plan development · Recovery strategies development · Contingency plan maintenance · Disaster response and recovery process management · Laws and regulations impact identification · Professional ethics adherence · Compliance validation · Auditor and regulator coordination · Compliance exceptions documentation
    After
    Leadership and organizational management (21%) · Systems lifecycle management (15%) · Risk management (20%) · Security operations (18%) · Contingency management (12%) · Law, ethics and compliance (14%)
    Review source
  4. ISC2updated

    Information Systems Security Management Professional

    Information Systems Security Management Professional: renewal period years. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    3
    After
    Not verified
  5. ISC2updated

    Information Systems Security Management Professional

    Information Systems Security Management Professional: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    https://www.isc2.org/certifications/issmp
    After
    https://www.isc2.org/certifications/issmp/issmp-certification-exam-outline
    Review source
  6. ISC2exam update

    Information Systems Security Management Professional

    Information Systems Security Management Professional: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    In-person at Pearson VUE Testing Centers
    After
    In person at authorized Pearson testing centers.
    Review source
  7. ISC2updated

    Information Systems Security Management Professional

    Information Systems Security Management Professional: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    $135.00 annually
    After
    Not verified
  8. ISC2price change

    Information Systems Security Management Professional

    Information Systems Security Management Professional: exam cost usd. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    599
    After
    Not verified
  9. ISC2updated

    Information Systems Security Management Professional

    Information Systems Security Management Professional: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    Not verified
    After
    https://www.isc2.org/certifications/issmp/issmp-certification-exam-outline
    Review source
  10. ISC2updated

    Information Systems Security Management Professional

    Information Systems Security Management Professional: salary premium high. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

    What changed
    Before
    15
    After
    Not verified
    Review source
Browse all certification updates

Sources and verification