BUILD TOMORROW.
FOR A MORE
SECURE TOMORROW.
ISSMP (Information Systems Security Management Professional)
ISC2 / ISSMPBuild the skills for your next mission.
This advanced certification course is meticulously designed for seasoned cybersecurity professionals seeking to validate their expertise in establishing, managing, and governing an enterprise-wide information security program.
Course objectives
Build practical skills across the key domains covered in ISSMP (Information Systems Security Management Professional) (ISSMP).
Security Leadership and Business ManagementDevelop and implement security strategy aligned with organizational goals and objectives.
- Develop and implement security strategy aligned with organizational goals and objectives.
- Establish and maintain security governance frameworks, policies, and procedures.
- Manage security-related financial resources, including budgeting and cost-benefit analysis.
- Develop and manage security awareness, training, and education programs.
- Implement and manage business continuity and disaster recovery planning.
- Understand and apply ethical considerations in information security management.
Security Compliance and Enterprise Risk ManagementDevelop and implement a comprehensive enterprise information security risk management program.
- Develop and implement a comprehensive enterprise information security risk management program.
- Identify and manage legal, regulatory, and contractual compliance requirements.
- Conduct security assessments, audits, and reviews to ensure compliance.
- Implement and manage third-party risk management programs.
- Establish and manage incident response and crisis management plans.
- Report on security posture and risk to executive management and stakeholders.
Security Program ManagementDevelop and manage security project plans, timelines, and deliverables.
- Develop and manage security project plans, timelines, and deliverables.
- Allocate and manage security resources, including personnel, technology, and budget.
- Implement security metrics and key performance indicators (KPIs) to measure program effectiveness.
- Manage security awareness, training, and education programs.
- Oversee the implementation and maintenance of security controls and technologies.
- Develop and manage secure system development lifecycle (SSDLC) processes.
Security Operations ManagementManage security operations center (SOC) functions and activities.
- Manage security operations center (SOC) functions and activities.
- Develop and implement incident response and recovery procedures.
- Manage vulnerability assessment and penetration testing programs.
- Implement and manage security monitoring and logging solutions.
- Oversee identity and access management (IAM) processes and technologies.
- Manage cryptographic controls and key management.
Strategic Planning, Finance, Procurement, and Vendor ManagementDevelop and maintain a long-term information security strategic plan.
- Develop and maintain a long-term information security strategic plan.
- Manage the financial aspects of information security, including budgeting and return on investment (ROI) analysis.
- Oversee the procurement of security products and services.
- Manage vendor relationships and ensure security requirements are met.
- Evaluate and select security technologies and solutions.
- Negotiate security-related contracts and service level agreements (SLAs).
Find your DoD 8140 pathway
Explore how this training may align to DoD 8140 work roles and proficiency levels.
About this course
This advanced certification course is meticulously designed for seasoned cybersecurity professionals seeking to validate their expertise in establishing, managing, and governing an enterprise-wide information security program. The CISSP-ISSMP credential, offered by (ISC)², signifies a deep understanding of the strategic and operational aspects of information security, moving beyond technical implementation to encompass policy, risk, and compliance within complex organizational structures. Participants will gain comprehensive knowledge of the management and governance frameworks crucial for protecting critical information assets and ensuring business continuity in an evolving threat landscape.
Training alone does not establish DoD 8140 qualification. Confirm position-specific requirements with your organization.