SecLeaderAcademy
← Home
ISC2 · Full exam outline
ISSMP
Information Systems Security Management Professional
Security management / leadership
Core certification
1
Leadership and Business Management
22%
1.1
Security governance and organizational alignment
1.2
Security programme budget, metrics and reporting
1.3
Roles, responsibilities and security awareness
1.4
Vendor, service provider and third-party management
1.5
Change and project management
2
Systems Lifecycle Management
19%
2.1
Security in the system development lifecycle
2.2
Integrate security into development and acquisition
2.3
Configuration and change control
2.4
System certification and accreditation
3
Risk Management
18%
3.1
Risk management programme and methodology
3.2
Risk assessment and analysis
3.3
Risk treatment and reporting
3.4
Continuous risk monitoring
4
Threat Intelligence and Incident Management
17%
4.1
Threat intelligence programme
4.2
Incident response plan and team readiness
4.3
Incident detection, triage and response
4.4
Post-incident review and forensics
5
Contingency Management
13%
5.1
Business impact analysis
5.2
Business continuity planning
5.3
Disaster recovery planning
5.4
Plan testing, training and maintenance
6
Law, Ethics and Security Compliance Management
11%
6.1
Legal, regulatory and privacy requirements
6.2
Compliance programme and audit management
6.3
Professional ethics
6.4
Security policy and standards compliance
Weights are the certification body’s published values and are checked against each outline revision.