CSPM study guide
CSPM · Work through your exam, one topic at a time.
The Certified Security Project Manager (CSPM) credential from the Security Industry Association (SIA) is designed specifically for professionals managing security projects. Unlike general project management certifications, the CSPM addresses the unique demands of security project management, demonstrating the ability to manage complex, technical security projects. The CSPM study guide has 6 sections and about 2,564 words.
01Project Initiation, Business Case, and Chartering
Domain 1 tests the front end of a security project: turning a threat, audit finding, or compliance obligation into an authorized, funded project with a named sponsor, a defensible business case, and a charter the project manager can actually manage against. (The source does not publish domain titles, so each section here is named by the content it examines.) Business case - the security risk or regulatory driver, options considered (including doing nothing and the residual risk that implies), a rough order of magnitude cost, and the expected risk reduction.
454 words, about 2 min02Scope Definition, Requirements, and Design Basis
Domain 2 tests how scope is defined and protected: the scope statement, the work breakdown structure, the requirements traceability chain, the design basis, and integrated change control. Most security projects fail here rather than in installation.
423 words, about 2 min03Schedule and Cost Planning
Domain 3 tests schedule and cost planning for security projects: dependency logic, critical path and float, estimating and reserves, and life-cycle cost. Expect calculation items, not just definitions.
445 words, about 2 min04Risk, Quality, and Regulatory Compliance
Domain 4 tests how risk is identified, scored, owned, and answered, and how quality and code compliance are planned and evidenced. For security systems, quality includes cybersecurity and privacy, not only physical workmanship.
427 words, about 2 min05Execution, Procurement, and Stakeholder Communication
Domain 5 tests directing and managing the work: contract selection, vendor and submittal management, communication planning, team coordination in occupied facilities, and disciplined handling of changes during installation. Match contract type to specification maturity.
404 words, about 2 min06Monitoring, Control, Validation, and Closeout
Domain 6 tests whether you can measure performance against the baseline, control change, validate the installed system, and close the project so the owner can operate and maintain it. Earned value: PV, EV, AC.
411 words, about 2 min