This concentration requires that a candidate demonstrate two years of professional experience in the area of management on a large enterprise-wide security model. This concentration contains deep managerial elements, such as project management, risk management, setting up and delivering a security awareness program, and managing a business continuity planning program. A CISSP-ISSMP establishes, presents, and governs information security programs demonstrating management and leadership skills. Typically the ISSMP certification holder or candidate will construct the framework of the information security department and define the means of supporting the group internally. ISSMPs have a far more well-rounded and complete comprehension of information security than other popular management credentials.
