ISC2
Information Systems Security Management Professional
ISSMP · active
Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data. Salary premiums are estimates, not a promise of a raise.
- Exam cost
- Not verified
- Questions · time · passing score
- 125 questions · 180 minutes · Pass: 700/1000
- Prerequisites
- Active CISSP plus 2 years relevant experience, or 7 years relevant experience in at least two domains; eligible degree or credential may waive one year on the latter route.
- Estimated salary premium
- Not established by comparable evidence
- Renewal requirements
- Not verified in this audit; confirm with issuer.
- Difficulty
- Not rated
Domains covered
- Leadership and organizational management (21%)
- Systems lifecycle management (15%)
- Risk management (20%)
- Security operations (18%)
- Contingency management (12%)
- Law, ethics and compliance (14%)
Where this credential fits
MyCyberPath career mappings are planning guidance, not universal employer requirements.
Compare this certificationRecent catalog changes
- ISC2exam update
Information Systems Security Management Professional
Information Systems Security Management Professional: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 125 questions, 3 hours, multiple choice and advanced item types, 700 out of 1000 points passing score
- After
- 125 items; 180 minutes; multiple choice and advanced items; pass 700/1000.
- ISC2updated
Information Systems Security Management Professional
Information Systems Security Management Professional: abbreviation. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISC2domain change
Information Systems Security Management Professional
Information Systems Security Management Professional: skills gained. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- ** Information security program vision and mission definition · Organizational governance alignment · Information security strategy implementation · Security policy framework management · Contractual security requirements management · Security awareness and training program management · Security metrics definition and reporting · Security budget preparation and management · Security program management · Product development and project management principles application · Systems lifecycle security integration · Vulnerability management program definition · Change control security management · Risk management program development · Supply chain security risk management · Risk assessments · Risk controls management · Security operations center establishment · Threat intelligence program establishment · Incident management program establishment · Contingency plan development · Recovery strategies development · Contingency plan maintenance · Disaster response and recovery process management · Laws and regulations impact identification · Professional ethics adherence · Compliance validation · Auditor and regulator coordination · Compliance exceptions documentation
- After
- Leadership and organizational management (21%) · Systems lifecycle management (15%) · Risk management (20%) · Security operations (18%) · Contingency management (12%) · Law, ethics and compliance (14%)
- ISC2updated
Information Systems Security Management Professional
Information Systems Security Management Professional: renewal period years. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 3
- After
- Not verified
- ISC2updated
Information Systems Security Management Professional
Information Systems Security Management Professional: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- https://www.isc2.org/certifications/issmp
- After
- https://www.isc2.org/certifications/issmp/issmp-certification-exam-outline
- ISC2exam update
Information Systems Security Management Professional
Information Systems Security Management Professional: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- In-person at Pearson VUE Testing Centers
- After
- In person at authorized Pearson testing centers.
- ISC2updated
Information Systems Security Management Professional
Information Systems Security Management Professional: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- $135.00 annually
- After
- Not verified
- ISC2price change
Information Systems Security Management Professional
Information Systems Security Management Professional: exam cost usd. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 599
- After
- Not verified
- ISC2updated
Information Systems Security Management Professional
Information Systems Security Management Professional: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Not verified
- After
- https://www.isc2.org/certifications/issmp/issmp-certification-exam-outline
- ISC2updated
Information Systems Security Management Professional
Information Systems Security Management Professional: salary premium high. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.