EXIN Information Security Management Professional (ISMP)

[jacob-kraniak]

[Certification] ISMP - EXIN Information Security Management Professional

Status: Backlog / In Progress / Studying / Completed
Target Completion: [YYYY-MM or QX 2026]
Priority: High / Medium

Overview

Management-focused certification on information security governance, risk, compliance, and program implementation. Strong emphasis on aligning security with business objectives (European/ISO-oriented).

Official Page: https://www.exin.com/certifications/exin-information-security-management-professional/
Exam Outline / Syllabus: Available on EXIN site

Prerequisites / Experience

• Recommended: Prior security knowledge (e.g., Security+ or equivalent) + practical experience in security management or governance.
• No strict prerequisites.

Exam Details

• Duration: 2 hours (120 minutes)
• Questions: 40 (multiple choice)
• Price: ~$250–$350 USD (varies by region/training bundle)
• Passing Score: 65% (or as per EXIN scaling)
• Format: Multiple choice (computer-based)

Domains & Study Checklist

• Information Security Management Principles — Concepts, frameworks (ISO 27001), governance.
• Information Security Strategy & Alignment — Business alignment, policies, stakeholder management.
• Risk Management — Identification, assessment, treatment, monitoring.
• Information Security Controls & Implementation — Controls selection, implementation, operations.
• Incident Management & Compliance — Incident handling, auditing, legal/compliance requirements.
• Continuous Improvement & Awareness — Metrics, awareness programs, continual improvement.

Resources & Study Plan

• Official EXIN training / study materials
• ISO 27001 resources and standards
• Practice exams
• [Add your specific books, courses, or notes here]

Milestones / Tasks

• Complete domain study & notes
• Practice exams (target 80%+)
• Schedule & pass exam
• Claim certification + update Credly / LinkedIn / resume / board
• Plan renewal (if applicable) and next steps

Additional Labels: exin, management, intermediate, grc