Understand the certification
认证简介
CISSP-ISSMP（信息系统安全管理专业人士）是 (ISC)² CISSP 认证体系下的高级专项认证，面向承担安全管理、治理和战略职责的高级安全领导者。需在有效 CISSP 认证基础上申请。
考试领域与权重
基于 (ISC)² 官方考试大纲，考试涵盖六大领域：
- 领导力与业务（Leadership and Business）：约 22%
- 系统生命周期管理（Systems Lifecycle Management）：约 19%
- 风险管理（Risk Management）：约 18%
- 威胁情报与事件管理（Threat Intelligence and Incident Management）：约 17%
- 合规管理（Contingency Management）：约 10%
- 法律、道德与安全合规（Law, Ethics and Security Compliance Management）：约 14%
考试形式
- 125 道选择题，考试时长 3 小时
- 通过分数 700/1000
- 有效期 3 年，需在 3 年内获得 20 个 CPE 学分维持认证
适合人群
- 首席信息安全官（CISO）及安全总监
- 安全项目经理和安全合规经理
- 希望从技术安全岗位转向安全管理层的 CISSP 持证者
Exam at a glance
- Exam code
- CISSP-ISSMP
- Provider
- 其他
- Format
- single-choice / multiple-choice
- Language
- English
- Validity
- 3 years
Skills in focus
Learning outcomes
- 系统掌握安全治理、风险管理和合规管理的高级理论与实践
- 能够在 CISO 层面制定安全战略、管理安全预算和推动合规项目
- 通过 CISSP-ISSMP 认证，在安全管理领域建立全球公认的专家级领导力资质
Who this is for
- 首席信息安全官（CISO）及安全总监、安全项目经理
- 具备 CISSP 认证并在安全管理领域有 2 年以上经验的高级安全管理者
- 希望从技术安全岗位转向安全管理层（CISO 路径）的 CISSP 持证者
- 负责企业安全合规、安全治理和安全战略规划的高级专业人士
Before you start
- 持有有效的 CISSP（Certified Information Systems Security Professional）认证
- 在信息安全管理领域具备至少 2 年的专业工作经验
Your learning path
3 chapters
Plan your preparation
- Learning hours
- 13h
- With relevant experience
- 10-12 weeks
- Starting from scratch
- 16-20 weeks
- Daily study
- 1-2h
Included in your preparation
- 68+ 道涵盖六大安全管理领域的题目详解
- 覆盖 (ISC)² CISSP-ISSMP 官方考试大纲全部知识点
- 模拟 125 题 3 小时真实考试环境
- AI 智能辅导针对薄弱安全管理领域个性化强化
- 进度追踪与各域得分分析
Preparation tips
- 65 题 90 分钟，平均每题 1 分钟，合理分配时间
- 及格分 70/100，不确定的题先标记跳过，回头再做
- 排除法非常有用 — 先排掉明显错误的选项，剩下的再分析
Common mistakes
- 没有读完所有选项就选答案 — 题目经常有"最佳"答案和"正确但不最佳"的干扰项
- 备考只刷题不理解原理 — 考试场景题需要理解底层概念
- 忽略时间管理 — 在难题上卡太久，导致后面简单题没时间做
Before you register
What are the prerequisites for the CISSP-ISSMP certification?
CISSP-ISSMP requires candidates to hold an active CISSP certification and have at least 2 years of professional work experience in information security management. This certification is designed for security management and senior security leaders.
What domains does the CISSP-ISSMP exam cover?
The CISSP-ISSMP exam covers core domains including security leadership and governance, security compliance management, security operations management, security risk management, and strategic planning and financial management, focusing on security management and strategic decision-making capabilities.
What is the difference between CISSP-ISSMP and CISSP-ISSAP?
CISSP-ISSAP focuses on security architecture design, while CISSP-ISSMP focuses on security management and governance. ISSMP emphasizes leadership, risk management, compliance, and security strategic planning — the management side of information security.
How should I prepare for the CISSP-ISSMP exam?
Start by systematically studying the (ISC)2 official materials and exam outline, combining theoretical knowledge with practical security management experience. Use extensive practice questions to familiarize yourself with the exam format, focusing on governance frameworks, risk management processes, and compliance requirements.
What roles do CISSP-ISSMP holders typically fill?
CISSP-ISSMP holders typically serve as Chief Information Security Officers (CISOs), security directors, security program managers, and security compliance managers. This certification is especially valuable for professionals looking to transition from technical roles into security management positions.
Learner experiences
Loading reviews…
Start with the first chapter.
2 free chapters · Full preparation from $39