OpenExamsFREE PRACTICE — ANY EXAM

Information Systems Security Management Professional — Information & Free Practice

US · Examination information

200 free questions · Answer explanations · No signup required

Start free practice →

Information Systems Security Management Professional

Provider
Pearson VUE
Format
Computer-based; multiple choice and advanced item types; English
Exam questions
Total questions: 125.
Time limit
3 hours
Passing score
700 out of 1000 points
Examination outline
  • Leadership and Organizational Management (21%)
    • Establish security’s role in organizational culture, vision, and mission
    • Align security program with organizational governance
    • Define and implement information security strategies
    • Define and maintain security policy framework
    • Manage security requirements in contracts and agreements
    • Manage security awareness and training programs
    • Define, measure and report security metrics
    • Prepare, obtain, and manage security budget
    • Manage security programs
    • Apply product development and project management principles
  • Systems Lifecycle Management (15%)
    • Manage integration of security throughout system life cycle
    • Integrate organization initiatives and emerging technologies throughout the security architecture
    • Define and manage comprehensive vulnerability management programs
    • Manage security aspects of change control
  • Risk Management (20%)
    • Develop and manage a risk management program
    • Manage security risks within the supply chain
    • Conduct risk assessments
    • Manage risk controls
  • Security Operations (18%)
    • Establish and maintain security operations center
    • Establish and maintain threat intelligence program
    • Establish and maintain incident management program
  • Contingency Management (12%)
    • Facilitate development of contingency plans
    • Develop recovery strategies
    • Maintain contingency plan, resiliency plan, business continuity plan and disaster recovery plan
    • Manage disaster response and recovery process
  • Law, Ethics, and Security Compliance Management (14%)
    • Identify the impact of laws and regulations that relate to information security
    • Understand, adhere to, and promote professional ethics
    • Validate compliance in accordance with applicable laws, regulations, and industry standards
    • Coordinate with auditors and regulators in support of internal and external audit processes
    • Document and manage compliance exceptions
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.