EXIN ISMP case studies

The EXIN Information Security Management Professional (ISMP) is a certification offered by EXIN, an independent examination and certification body. This page is an independent study resource; it is not affiliated with, endorsed by, or operated by EXIN, and it does not reproduce any official question bank. The certification is aimed at professionals who manage or contribute to an organisation's information security management system: security officers and managers, IT managers, risk and compliance staff, auditors, and consultants who advise on security governance. Candidates typically prepare by studying information security management principles, the plan-do-check-act cycle applied to a management system, risk assessment and risk treatment, security policy and organisation, asset management, human resources security, physical and environmental security, communications and operations management, access control, incident management, business continuity, and compliance. The EXIN ISMP case studies are 5 cases and about 3,740 words.