ISC2

Information Systems Security Management Professional

ISSMP

The ISSMP certification from ISC2 validates your expertise in establishing, presenting, and governing information security programs. Designed for experienced security leaders, it demonstrates deep management and leadership skills across critical functions like incident response, recovery, and risk management. Earning the ISSMP proves you can align security with organizational goals and lead with confidence.

Practice Free Questions

6Domains

30Objectives

197Practice pages

920Free questions

ISSMP free practice questions

Choose any objective and open any question page — no sign-in required.

1.1 Establish security's role in organizational culture, vision, and mission

33 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–33

1.2 Align security program with organizational governance

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

1.3 Define and implement information security strategies

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

1.4 Define and maintain security policy framework

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

1.5 Manage security requirements in contracts and agreements

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

1.6 Manage security awareness and training programs

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

1.7 Define, measure, and report security metrics

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

1.8 Prepare, obtain, and manage security budget

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

1.9 Manage security programs

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

1.10 Apply product development and project management principles

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

3.1 Develop and manage a risk management program

37 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–37

3.2 Manage security risks within the supply chain (e.g., supplier, vendor, third-party risk, contracts)

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

3.3 Conduct risk assessments

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

3.4 Manage risk controls

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

4.1 Establish and maintain security operations center

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

4.2 Establish and maintain threat intelligence program

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

4.3 Establish and maintain incident management program

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

5.1 Facilitate development of contingency plans

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

5.2 Develop recovery strategies

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

5.3 Maintain contingency plan, resiliency plan (e.g., Continuity of Operations Plan (COOP)), business continuity plan (BCP) and disaster recovery plan (DRP)

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

5.4 Manage disaster response and recovery process

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

6.1 Identify the impact of laws and regulations that relate to information security

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

6.2 Understand, adhere to, and promote professional ethics

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

6.3 Validate compliance in accordance with applicable laws, regulations, and industry standards

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

6.4 Coordinate with auditors and regulators in support of internal and external audit processes

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

6.5 Document and manage compliance exceptions

19 questions · 4 pages

Questions 1–5 6–10 11–15 16–19

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (30 objectives · 197 pages).

Information Systems Security Management Professional

ISSMP free practice questions

1.1 Establish security's role in organizational culture, vision, and mission

1.2 Align security program with organizational governance

1.3 Define and implement information security strategies

1.4 Define and maintain security policy framework

1.5 Manage security requirements in contracts and agreements

1.6 Manage security awareness and training programs

1.7 Define, measure, and report security metrics

1.8 Prepare, obtain, and manage security budget

1.9 Manage security programs

1.10 Apply product development and project management principles

2.1 Manage integration of security throughout system life cycle

2.2 Integrate organization initiatives and emerging technologies throughout the security architecture

2.3 Define and manage comprehensive vulnerability management programs (e.g., vulnerabilities, scanning, penetration testing, threat analysis)

2.4 Manage security aspects of change control

3.1 Develop and manage a risk management program

3.2 Manage security risks within the supply chain (e.g., supplier, vendor, third-party risk, contracts)

3.3 Conduct risk assessments

3.4 Manage risk controls

4.1 Establish and maintain security operations center

4.2 Establish and maintain threat intelligence program

4.3 Establish and maintain incident management program

5.1 Facilitate development of contingency plans

5.2 Develop recovery strategies

5.3 Maintain contingency plan, resiliency plan (e.g., Continuity of Operations Plan (COOP)), business continuity plan (BCP) and disaster recovery plan (DRP)

5.4 Manage disaster response and recovery process

6.1 Identify the impact of laws and regulations that relate to information security

6.2 Understand, adhere to, and promote professional ethics

6.3 Validate compliance in accordance with applicable laws, regulations, and industry standards

6.4 Coordinate with auditors and regulators in support of internal and external audit processes

6.5 Document and manage compliance exceptions

Information Systems Security Management Professional

ISSMP free practice questions

Domain 1 · Leadership and Organizational Management33% of practice bank · 10 objectives · 306 questions33%

Domain 2 · Systems Lifecycle Management13% of practice bank · 4 objectives · 115 questions13%

Domain 3 · Risk Management13% of practice bank · 4 objectives · 118 questions13%

Domain 4 · Security Operations12% of practice bank · 3 objectives · 110 questions12%

Domain 5 · Contingency Management15% of practice bank · 4 objectives · 137 questions15%

Domain 6 · Law, Ethics and Security Compliance Management15% of practice bank · 5 objectives · 134 questions15%