The ISSMP (Information Systems Security Management Professional) is a prestigious ISC2 concentration for cybersecurity leaders. It demonstrates that you excel at establishing, presenting, and governing information security programs isc2 — with the management and leadership depth to match. It is approved by the U.S. Department of Defense under DoDM 8140.
Audience Profile
The ISSMP is designed for senior-level professionals leading security at an organizational level. It’s ideal for roles such as:
- Chief Information Officer (CIO)
- Chief Information Security Officer (CISO)
- Chief Technology Officer (CTO)
- Senior Security Executive
What will you learn?
The ISSMP spans six critical management domains:
- Organizational Governance — Aligning security strategy with business goals
- Security Policies & Agreements — Developing and enforcing security policies
- Security Integration — Embedding security across organizational initiatives
- Risk & Supply Chain Management — Managing risk end-to-end across the supply chain
- Threat Intelligence & Incident Management — Overseeing security operations and response
- Contingency Planning & Recovery — Building resilience and continuity strategies
Why Get Certified?
- Prove Leadership — Validate your ability to govern and lead security programs at the highest level
- Advance Your Career — Opens doors to C-suite and senior executive roles
- Stand Out — Demonstrates elite, focused expertise beyond the CISSP
- DoD Recognised — Approved under U.S. DoD Directive 8140, valuable for government and defence sectors
Prerequisites
- Active CISSP + 2 years of cumulative paid work experience in one or more ISSMP domains, OR
- 7 years of cumulative paid work experience across the ISSMP domains (without a CISSP)