- What the Industrial Security Professional Credential Actually Is
- How the Exam Is Built and Delivered
- Eligibility and the Application Path
- Fees, Retests and Scheduling Mechanics
- The 11 Examination Categories
- Working With the Open-Book Reference Library
- Sequencing Your Preparation by Domain
- Keeping the Credential: Renewal Rules
- Who Values the ISP
- Reading Conflicting Published Information
- Frequently Asked Questions
- The exam has 110 multiple-choice questions in 150 minutes, and you need at least 70% to pass.
- Eligibility requires two cumulative years of qualifying industrial-security experience; NCMS membership and current industrial-security employment are not...
- The exam fee is USD 275 for NCMS members and USD 400 for nonmembers.
- Eleven categories cover everything from Security Administration to NISP Systems; no category weightings are published.
What the Industrial Security Professional Credential Actually Is
The Industrial Security Professional (ISP) certification is issued by NCMS, Inc., The Society of Industrial Security Professionals. It addresses the protection of government classified information under the U.S. National Industrial Security Program (NISP), the framework through which cleared contractors safeguard classified material entrusted to them by government customers.
That focus matters because the acronym "ISP" is shared with several unrelated credentials in other fields. This article covers only the NCMS-issued Industrial Security Professional certification. If you are still orienting yourself on the terminology, our explainers on what ISP certification is and what ISP stands for cover the basics, and the practice questions on the main ISP practice test site are built around this specific credential.
One historical note worth knowing: NCMS ended the program's ANAB accreditation in March 2024 while continuing the certification program itself. The credential remains active and the exam was revised, with the updated version launching on April 15, 2025.
How the Exam Is Built and Delivered
The ISP exam consists of 110 multiple-choice questions to be completed in 150 minutes. That works out to a little under a minute and a half per question, which is comfortable for recall questions and tight for scenario-heavy ones that require you to look something up.
- Scoring: Each question carries equal weight, and scoring is best-answer with no partial credit. Final scores are not rounded.
- Passing mark: A minimum of 70%. Our breakdown of the ISP passing score explains what that means in raw question counts.
- Delivery: Prometric test centers or ProProctor remote proctoring.
- Remote requirements: You supply a compatible computer, camera, microphone and internet connection.
- Test-center requirements: Valid government-issued photo identification that carries your signature.
For a candid look at how this format feels in practice, see how hard the ISP exam is.
Eligibility and the Application Path
The experience requirement is two cumulative years of qualifying industrial-security experience, with the relevant duties making up at least 10% of your workload. Military or police service can count, but only when it included qualifying industrial-security work; the service alone is not enough.
Two things the ISP does not require surprise many candidates. You do not need to be currently employed in industrial security, and you do not need to be an NCMS member. Membership only changes your fees.
What you submit
- A detailed resume documenting your qualifying experience.
- A signed Candidate Confidentiality & Conflict of Interest (CCOI) agreement.
- The application itself.
- Payment.
After you pass, a post-pass CCOI step completes your certification. NCMS asks you to allow at least 30 days for application processing, and the current Testing Process page gives you six months after approval to schedule and take the exam. Plan your calendar accordingly, and see our guide to ISP requirements for a fuller walkthrough of eligibility questions, plus ISP exam dates for scheduling logistics.
Fees, Retests and Scheduling Mechanics
| Item | NCMS Member | Nonmember |
|---|---|---|
| Exam fee | USD 275 | USD 400 |
| Retest fee | USD 140 | USD 200 |
| Optional Exam Preparation Program (per current public FAQ) | USD 50 | USD 100 |
| Renewal (every three years) | USD 75 | USD 125 |
The issuer's June 4, 2025 preparation presentation also lists a USD 50 international surcharge. That is a dated published fee rather than a separately verified 2026 price change, so confirm it directly with NCMS if it applies to you. The Exam Preparation Program figures above come from the current public FAQ, and the course materials themselves were not reviewed for this article.
Retest rules
- A 30-day wait applies before retesting.
- No more than four attempts are allowed in any 12-month period.
The membership fee gap is meaningful, so run the math on joining versus paying the nonmember rate. Our ISP certification cost breakdown lays out the full budget, including renewal.
The 11 Examination Categories
The eleven categories below reproduce the official examination-category headings from the ISP-2004 Certification Program Manual (version 3.6, effective April 2025), which are corroborated by the ISP-3034 requirements document. The issuer does not publish percentage allocations for them. For deeper coverage of each, see the complete guide to all 11 ISP content areas.
Domain 1: Security Administration
The program-management backbone of a cleared facility.
- Roles and responsibilities of the security staff and management
- Facility clearance processes and how they are maintained
- Visit control, reporting requirements and program documentation
Domain 2: Document Security
Handling classified material across its lifecycle.
- Marking, storage and transmission of classified documents
- Accountability, reproduction and destruction
Domain 3: Information Systems Security
Safeguarding classified information on automated systems.
- How classified systems are authorized and operated
- Where the security officer's role intersects with the technical staff
Domain 4: Physical Security
Protection of the places where classified information lives.
- Closed areas, storage containers and intrusion detection concepts
- Access controls and protective measures at the facility
Domain 5: Personnel Security
Who may access classified information and how that is determined.
- Eligibility for access and the investigation process
- Reporting obligations and ongoing evaluation of cleared employees
Domain 6: International Security
Classified and controlled activity that crosses borders.
- Foreign involvement with cleared contractors
- International visits and transfers of classified material
Domain 7: Classification
The decisions that make information classified in the first place.
- Original and derivative classification concepts
- Classification guidance and its role in contracts
Domain 8: Security Education
Training and awareness obligations for cleared personnel.
- Required briefings and refresher training
- Building a program that keeps employees informed
Domain 9: Audits & Self-Assessments
Measuring whether the program actually works.
- Government reviews versus internal self-inspections
- Identifying and correcting deficiencies
Domain 10: Special Security Information
Categories of information that carry additional handling requirements beyond standard classified material.
- Recognizing when special access or handling rules apply
- How these requirements layer on top of baseline safeguarding
Domain 11: NISP Systems
The government information systems that industrial security professionals use daily.
- The public program manual names DISS, NISS, eApp and eMASS
- Knowing what each system is used for in the clearance and authorization lifecycle
Key Takeaway
The public manual still names DISS. A shift to NBIS would be announced in advance by the issuer, so do not assume it. Check the NCMS announcements shortly before your test date for any change to which systems are tested.
Working With the Open-Book Reference Library
The ISP exam is open-book in a specific, limited way: you may use approved searchable electronic reference PDFs supplied inside the testing interface. External online resources and consultation with other people are prohibited, so this is not a general open-internet exam.
Practical consequences:
- Search skill beats memorization for obscure details. You should know which reference governs which topic, so a keyword search lands you on the right page quickly.
- Time is the real constraint. At 150 minutes for 110 questions, every lookup costs you. Reserve searching for questions where you genuinely need a citation.
- Concepts still must be internalized. Best-answer scoring rewards judgment. Several answers may be partially right, and the reference library will not pick the best one for you.
The issuer's Study Resources page references Categories & Topics and Detailed References matrices, but those linked documents sit behind a sign-in and were not reviewed here. Pull them yourself once you have an account. Our ISP study guide and one-page ISP cheat sheet can help you organize what you find.
Sequencing Your Preparation by Domain
Because category weights are unpublished, the safest plan front-loads the areas where your workplace experience is thinnest. A candidate who lives in personnel security every day needs less time there than in international security or the NISP systems. One illustrative ordering:
Foundations: Security Administration and Classification
- These two frame everything else; classification decisions drive marking, storage and handling.
- Build your reference-library search habits now.
Protecting Material and People: Document, Physical and Personnel Security
- Group these because they share vocabulary around access, storage and accountability.
Technical and Cross-Border Topics: Information Systems Security, International Security, Special Security Information
- Spend extra time here if your daily work rarely touches them.
Program Health and Systems: Security Education, Audits & Self-Assessments, NISP Systems
- Finish with timed mixed practice drawn from all eleven categories.
Time your practice runs against the real constraint: 110 questions in 150 minutes. Our practice tests are useful for rehearsing that pace.
Keeping the Credential: Renewal Rules
Certification runs in three-year cycles. To renew you need:
- 60 NCMS continuing education units (CEUs) with supporting documentation.
- Payment of USD 75 for members or USD 125 for nonmembers.
Limits on how you earn those CEUs matter. No more than 30 may come from membership or voluntary service, and at least half must come from qualifying education, instruction, presentations or publications. NCMS applies its own CEU award schedule, so do not assume an hour of activity equals one credit.
Who Values the ISP
The credential's audience is the community of professionals who manage classified programs inside cleared industry: facility security officers, security managers, and the teams supporting them at defense and government contractors. Because the certification centers on NISP requirements, its value tracks the demand for people who can run a compliant program for cleared facilities.
Salary and job-market specifics vary by employer, region and clearance level, and we avoid quoting unsupported figures here. For a grounded view, read our ISP salary guide, the overview of ISP jobs, and the ROI analysis to decide whether the fees and renewal obligations make sense for your career path.
Reading Conflicting Published Information
NCMS has revised the program repeatedly, and older wording lingers in places. Some FAQ text and residual clauses in the manual or brochures still mention outdated terms. When you see conflicts, rely on the dated changes and the current Testing Process guidance:
| Item | Older wording you may still see | Current position |
|---|---|---|
| Experience threshold | Five years | Two cumulative years (changed March 24, 2024) |
| Supervisor recommendation letter | Required | Removed June 11, 2024 |
| Test duration | Two hours | 150 minutes for 110 questions |
| Approval window | One year | Six months to schedule and test after approval |
If you are comparing sources and one seems to disagree with this article, check the issuer's current Testing Process page first. The same caution applies to third-party summaries, including any that mix this credential up with other certifications sharing the acronym.
Frequently Asked Questions
The exam has 110 multiple-choice questions with a 150-minute time limit. Each question carries equal weight, scoring is best-answer, and there is no partial credit.
The minimum passing score is 70%. Final scores are not rounded, so a score just under the threshold does not pass. See our passing score guide for detail.
No to both. You need two cumulative years of qualifying industrial-security experience, with relevant duties at least 10% of your workload. Membership only lowers your exam, retest and renewal fees.
Yes. You must wait 30 days between attempts and may test no more than four times in any 12-month period. Retest fees are USD 140 for members and USD 200 for nonmembers.
Only partially. You may use approved searchable electronic reference PDFs provided in the testing interface. External online resources and consulting other people are prohibited.