THE ULTIMATE GUIDE TO THE

CISSP-ISSMP
Be Recognized as an Expert in Information Security Management
Achieve
More
in Your
Career

You already prove every day that

you are a globally respected security
leader. Now you can elevate your
INSIDE…
knowledge and skills even higher as
» Is the CISSP-ISSMP Right for Me?
a go-to expert in information security
management. » CISSP-ISSMPs from Around the Globe

The Ultimate Guide to the CISSP- » Fast Facts About CISSP-ISSMP

ISSMP covers everything to know
about this elite and specialized
» Benefits of Being CISSP-ISSMP-Certified
certification. See how the CISSP- » Benefits of (ISC)2 Membership
ISSMP concentration builds on
the CISSP and helps you become » CISSP-ISSMP Exam Overview
an expert in information security
management. » Official CISSP-ISSMP Training
» Pathway to CISSP-ISSMP Certification
» Free CPE Opportunities
» Certification is Just the Beginning

2
Is the CISSP-ISSMP
Right for Me?
The CISSP-ISSMP is ideal for professionals who already hold
the CISSP certification and want to build on their expertise in
information security management. It shows you have deep
management and leadership skills and the advanced knowledge to
establish, present and govern information security programs.

Experience
To qualify for the CISSP-ISSMP, candidates must be a
CISSP in good standing with two years of cumulative,
paid, full-time work experience in one or more of the
six domains of the (ISC)2 CISSP-ISSMP Common Body
of Knowledge (CBK®).

Discover Your Path

See “Pathway to CISSP-ISSMP
Certification” for more information.

Jobs that Typically Use or Require the CISSP-ISSMP

» Chief Information Officer

» Chief Information Security Officer
» Chief Technology Officer
» Senior Security Executive
 While studying and training for the As someone running your own company, you
ISSMP, I got to see how the dots of need to make sure customers have a clear
individual security processes connected idea of your level of expertise. For this reason,
in support of an overall mission. I’ve made sure that I have all important and
relevant certifications available. CISSP-ISSMP
is well-recognized around the world, but it’s
not my only badge. The industry changes too
fast to stand still.
Diane McClain
Architect, Information Technology Steve Durbin
Centene Corporation
DIrector
St. Louis, Missouri, U.S.A
Ex Cathedra Solutions Ltd.
UK

CISSP-ISSMPs from Around the Globe

The CISSP-ISSMP has opened doors Passing the CISSP-ISSMP exam increased
and increased my tenure as a sound my own confidence in my Information
cybersecurity professional. I have had the Security Management knowledge, as well
chance to speak at several international as the perception and confidence others
cybersecurity conferences and now mentor have in my skills.
CISSP and CISSP-ISSMP aspirants.
Tiago Kiill
Gezahegn Tadesse
Regional Security Officer
Infrastructure and Security Project Manager
The Americas at TMF Group
Boyd Gaming Sao Paulo, Brazil
Las Vegas, Nevada, U.S.A

Join the (ISC)² Community!

Meet, learn from and ask questions of peers in our virtual community. You don’t have to
be an (ISC)2 member to join relevant discussions with a network of security professionals
focused on ensuring a safe and secure cyber world.
4
 Fast Facts About CISSP-ISSMP
Introduced in 2003

DoD Approved – CND-SP Manager

Average CISSP-ISSMP
Salary: U.S. $140,340

CISSP-ISSMP
RANKED #19
on the 2019
SHOUT-OUTS NEXT BIG THING LIST
— CertMag

5
 Benefits of Being
CISSP-ISSMP-Certified

Career advancement
Raise visibility and credibility,
improve job security and
create new opportunities.
This concentration proves
you have an elite level of Versatile skills
knowledge and expertise. Vendor-neutral so skills
can be applied to
different technologies and
methodologies.

Respect
Differentiate yourself to
employers, clients and peers.
Solid foundation
Be better prepared to stem
cyber attacks and inspire
a safe and secure cyber
world.
Community of professionals
Gain access to (and respect from)
a global community of like-
minded cybersecurity leaders.
Higher salaries
On average, (ISC)2 members
report earning 35% more
than non-members.

Expanded knowledge
Reach a deeper, better and
broader understanding of the
common body of knowledge
for cybersecurity.
Stronger skill set
Expand the skills and
knowledge needed to fulfill
organizational duties.

6
Benefits of
(ISC)2 Membership
Once you earn your CISSP-ISSMP, you build on your CISSP
credential and remain part of a professional community
that never stops learning and growing. You also maintain
ongoing access to a full suite of benefits and resources for
continuing education and development:

» Free online (ISC)2 Professional Development

Institute courses
» Free subscription to InfoSecurity Professional Magazine
» Member pricing for (ISC)2 events
» 50% off official (ISC)2 textbooks
» Deep discounts on industry conferences
» Expert-led webinars on the latest security issues
» The ability to join or start a local (ISC)2 Chapter
» Volunteer opportunities
» Safe and Secure Online program
» Professional recognition through (ISC)2 Awards Programs
» Digital badges to promote expertise
» (ISC)2 Member Perks

Digital Badges Show Off Your Skills

A digital badge is the cool (and secure) way to share your credential
online. You can attach it to a website, digital resume, email signature or
social network. And with one simple click, employers and colleagues can
verify your credential – and all that’s required to earn it.

Easy to claim and use, digital badges let you…

» Share abilities online
» Prove verification of abilities in real time
» Show the experience and knowledge required to earn
your CISSP-ISSMP
7
 CISSP-ISSMP Exam Overview
The CISSP-ISSMP LAW, ETHICS AND
exam evaluates your SECURITY COMPLIANCE
MANAGEMENT
expertise across six
domains. Think of LEADERSHIP AND
BUSINESS
domains as topics you 11 % MANAGEMENT
need to master based CONTINGENCY
on your professional MANAGEMENT 20%
experience and 15 %
education. Passing
the exam proves you
have the advanced
management and
leadership skills THREAT
INTELLIGENCE 17 %
necessary to effectively AND INCIDENT
MANAGEMENT
establish, present and 18 %
govern information SYSTEMS LIFECYCLE
MANAGEMENT
security programs.
19 %

RISK
MANAGEMENT

125
3
Number of items on the CISSP-ISSMP exam

Maximum amount of time for Exam availability: English

the CISSP-ISSMP exam
Testing Centers: Pearson VUE
hrs.

700 Score you need out of 1,000

to pass the exam

8
Official
CISSP-ISSMP
Training
Training and self-study aids directly
from (ISC)2 or one of our many Official
Training Partners help you get ready for
the CISSP-ISSMP exam by reviewing
relevant domains and topics.

Online Self-Paced

CISSP-ISSMP
Study Resources
» Exam Outline

» Official (ISC)² Guide to the

CISSP-ISSMP CBK, Second Edition

» Suggested References

» Official CISSP-ISSMP Flash Cards

Create Your Plan

Get your copy of the (ISC)²
Certification Prep Kit.
9
 Pathway to CISSP-ISSMP
Certification
Obtain the Required Experience
To qualify for the CISSP-ISSMP, you must be a CISSP in good standing and have two years of
cumulative, paid, full-time work experience in one or more of the six domains of the CISSP-ISSMP
Common Body of Knowledge (CBK):

Domain 1. Leadership and Business Management

Domain 2. Systems Lifecycle Management
Domain 3. Risk Management
Domain 4. Threat Intelligence and Incident Management
Domain 5. Contingency Management
Domain 6. Law, Ethics and Security Compliance Management

Study for Many self-study resources are available from (ISC)2 – the creator and keeper of the
the Exam CISSP-ISSMP CBK – to help you prepare with confidence.

Pass the Candidates are given a maximum of three hours to complete the 125-item CISSP-ISSMP
exam. If you’re ready now, schedule your exam by creating an account with Pearson
Exam VUE, the leading provider of global, computer-based testing for certification and
licensure exams.

Get After you pass the exam, you will have nine months from the date of the exam to
Endorsed complete the (ISC)2 endorsement process.

Earn CPEs
(ISC)2 members recertify every three years to maintain certification. Recertification
is accomplished by earning continuing professional education (CPE) credits and
paying an annual maintenance fee (AMF) to support your ongoing development.

20 CPEs U.S. $125 AMF 3 years

Members with multiple (ISC)2 certifications only pay a single AMF.

10
Free CPE Opportunities
The CPE requirement helps you maintain your competencies following
initial certification. By developing and enhancing skills through CPE
activities, you make an important investment in yourself while increasing
value to customers and employers.

(ISC)2 makes it possible for you to earn all your CPE credits without
spending a dime.

Join Webinars
Think Tanks
Security Briefings
eSymposiums

Solutions Summit

Read & Write

Read the bimonthly InfoSecurity Professional e-magazine and take a short quiz
Subscribe to and summarize an information security magazine
Read a book directly related to CISSP-ISSMP and submit a 150-word review
Author an information security article published in a journal or magazine

Review an educational white paper related to the CISSP-ISSMP

Attend Trainings & Events

(ISC)2 Chapter meetings

(ISC)2 Professional Development Institute courses

Prepare or attend an educational presentation related to the CISSP-ISSMP
CBK domains

Volunteer
Become a Safe and Secure Online Ambassador and spread your knowledge about
cyber safety in your community
Volunteer to help develop (ISC)2 Certification exams
(ISC)2 Professional
Development
Institute

Certification Is Just the Beginning

The (ISC)² Professional Development Institute (PDI) is your go-to resource for timely and relevant
continuing education opportunities that will keep your skills sharp and curiosity piqued. All courses
are designed with input from leading industry experts and based on proven learning techniques.
And best of all, they’re FREE to (ISC)² members and count toward CPE credits.

Not a member yet? PDI courses are available for purchase, so you have the opportunity to learn how
to better secure critical assets and consistently grow as a cybersecurity professional.

Course types include:

• Immersive – in-depth investigations of a single topic delivered in an online,
self-paced format.
• Lab – hands-on approach enabling learners to practice specific technical skills within a virtual
machine environment.
• Express Learning – topical short-format modules that leverage the expertise of
(ISC)² members.

Go beyond certification with courses from our

growing portfolio.

Learn more about PDI and the free

courses offered to (ISC)2 members:
www.isc2.org/development

12
Get in Touch with Us
For more information about CISSP-ISSMP certification and training, contact an Education Consultant
in your region:

Americas: Phone: +1.866.331.4722 ext. 2 Email: [email protected]

Europe, Middle East and Africa: Phone: +44 203 960 7800 Email: [email protected]

Asia-Pacific: Phone: +852.2850.6951 Email: [email protected]

Japan: Phone: +81-3-5322-2837 Email: [email protected]
China: Email: [email protected]

About (ISC)2
(ISC)² ® is an international nonprofit membership association focused on inspiring a safe and
secure cyber world. Best known for the acclaimed Certified Information Systems Security
Professional (CISSP®) certification, (ISC)² offers a portfolio of credentials that are part of a
holistic, programmatic approach to security. Our association of candidates, associates and
members, more than 235,000 strong, is made up of certified cyber, information, software and
infrastructure security professionals who are making a difference and helping to advance the
industry. Our vision is supported by our commitment to educate and reach the general public
through our charitable foundation – The Center for Cyber Safety and Education™.

For more information on (ISC)²,

visit www.isc2.org, follow us on Twitter or connect with us on Facebook and LinkedIn.