- The Short Answer: What ISP Means Here
- Why the Acronym Causes Confusion
- Who Issues the Credential
- What the Credential Covers
- The 11 Examination Categories
- How the Exam Works
- Who Qualifies to Sit for It
- Fees, Processing and Scheduling
- Where the Credential Is Used
- Keeping the Credential Active
- Reading Conflicting Information Correctly
- A Domain-Based Preparation Sequence
- Frequently Asked Questions
- ISP means Industrial Security Professional, a credential from NCMS focused on protecting classified information under the National Industrial Security Program.
- The exam has 110 multiple-choice questions in 150 minutes, with a 70% minimum passing score.
- Eligibility requires two cumulative years of qualifying industrial-security experience, with relevant duties at least 10% of workload.
- The scope spans 11 examination categories, from Security Administration to NISP Systems.
The Short Answer: What ISP Means Here
In the context of this site, ISP stands for Industrial Security Professional. It is a professional certification for people who protect U.S. government classified information in the hands of private industry, the work governed by the National Industrial Security Program (NISP). It is a security-compliance credential, not a technology-provider designation, and it has nothing to do with internet access.
If you landed here after searching "what does ISP mean," you may have been looking for any of several unrelated expansions. This article covers only the Industrial Security Professional certification. For other angles on the same question, see our companion explainers: What Does ISP Stand For?, ISP Meaning, and What Is ISP Certification?
Why the Acronym Causes Confusion
"ISP" is a crowded acronym. It is used across technology, project management, supply-chain planning and other fields, and each use belongs to a different organization with different rules. That matters for exam candidates because details such as fees, exam length, eligibility and renewal differ from one credential to another. A figure you read about one "ISP" does not transfer to another.
Who Issues the Credential
The certification is administered by NCMS, the professional society for industrial security practitioners. Exams are delivered through Prometric, either at a test center or through ProProctor remote proctoring. NCMS ended the program's ANAB accreditation in March 2024 while continuing to operate the certification itself, a point worth knowing if an employer or older document references accreditation status.
Because the program is run by a society rooted in the cleared-contractor community, its questions reflect how security work is actually done inside companies that hold facility clearances and handle classified contracts.
What the Credential Covers
The ISP addresses the protection of classified information entrusted to industry under the NISP. In practice, that means the daily responsibilities of facility security officers, security managers and compliance staff at cleared companies: administering the security program, safeguarding classified documents, managing personnel clearances, securing authorized information systems, handling visits and foreign involvement, classifying information correctly, educating employees, and preparing for government oversight.
The credential signals that a professional understands how these pieces fit together and can apply the governing requirements to real situations. It is a breadth credential: candidates are expected to be competent across the whole program, not just in a single specialty.
The 11 Examination Categories
The scope is organized into 11 examination categories, reproduced from the ISP Certification Program Manual (ISP-2004). NCMS does not publish percentage allocations for these categories in the public documents, and because individual questions carry equal weight, you should not assume the categories carry equal weight on your exam. Prepare broadly. For a deeper walkthrough, read our ISP Exam Domains guide covering all 11 content areas.
Domain 1: Security Administration
The management layer of an industrial security program.
- Program structure, responsibilities and oversight
- How administrative requirements tie to the rest of the categories
Domain 2: Document Security
Handling classified material through its life cycle.
- Marking, storage, transmission and accountability concepts
- Reproduction, destruction and control of classified holdings
Domain 3: Information Systems Security
Protecting classified information processed on authorized systems.
- Authorization concepts and the security of systems that process classified data
- How system security intersects with physical and personnel controls
Domain 4: Physical Security
Safeguarding the places where classified information lives.
- Protective measures for facilities and storage
- Access control and supporting safeguards
Domain 5: Personnel Security
Determining and maintaining who may access classified information.
- Clearance processing and eligibility concepts
- Ongoing responsibilities for cleared employees
Domain 6: International Security
Classified work that crosses national borders.
- Foreign involvement with cleared companies
- International visits and the handling of foreign-related classified activity
Domain 7: Classification
The decisions that determine what is protected and why.
- Classification guidance and how contracts convey it
- Applying classification decisions correctly
Domain 8: Security Education
Training the cleared workforce.
- Briefings and awareness obligations
- Building a program employees actually follow
Domain 9: Audits & Self-Assessments
Verifying that the program works.
- Internal self-review practices
- Preparing for and responding to government oversight
Domain 10: Special Security Information
Categories of protected information that carry additional handling requirements beyond standard classified material.
- Recognizing when specialized requirements apply
- Coordinating handling with the appropriate authorities
Domain 11: NISP Systems
The government information systems industrial security practitioners use.
- The public manual names DISS, NISS, eApp and eMASS
- Replacement of DISS questions by NBIS depends on an advance announcement from the issuer, so confirm current scope before you test
How the Exam Works
The assessment is 110 multiple-choice questions in 150 minutes, with a minimum passing score of 70%. Every question carries equal weight, scoring is best-answer, and there is no partial credit and no rounding of final scores. The revised exam launched April 15, 2025.
The best-answer format deserves attention. More than one option may look defensible, and the task is to choose the response that most fully reflects the governing requirements. Candidates who rely on workplace habit rather than the written standard are the ones most likely to be pulled toward a plausible but incorrect choice.
| Exam Feature | Detail |
|---|---|
| Questions | 110 multiple-choice |
| Time allowed | 150 minutes |
| Minimum passing score | 70% |
| Scoring | Equal weight, best answer, no partial credit, no rounding |
| Delivery | Prometric test center or ProProctor remote proctoring |
| Reference access | Approved searchable electronic reference PDFs in the testing interface |
Remote candidates need a compatible computer, camera, microphone and internet connection. Test-center candidates need valid government-issued photo identification with a signature. To understand how the score threshold plays out, see ISP Passing Score: exactly what you need to pass, and for a realistic sense of difficulty, How Hard Is the ISP Exam?
Who Qualifies to Sit for It
Eligibility is built on experience rather than a degree. Applicants need two cumulative years of qualifying industrial-security experience, and the relevant duties must make up at least 10% of their workload. Military or police service counts only when it included qualifying industrial-security work.
- Current employment in industrial security is not required. What matters is the qualifying experience you have accumulated.
- NCMS membership is not required. Membership affects pricing, not eligibility.
- The application package includes a detailed resume, a signed Candidate Confidentiality & Conflict of Interest agreement, the application itself and payment. A post-pass CCOI completes certification.
For a full breakdown of what counts as qualifying experience and how to document it, read ISP Requirements: eligibility, prerequisites and how to qualify.
Fees, Processing and Scheduling
| Item | NCMS Member | Nonmember |
|---|---|---|
| Exam fee | USD 275 | USD 400 |
| Retest fee | USD 140 | USD 200 |
| Optional Exam Preparation Program | USD 50 | USD 100 |
| Renewal fee (per three-year cycle) | USD 75 | USD 125 |
The issuer's June 4, 2025 preparation presentation also lists a USD 50 international surcharge. Treat that as a dated published fee rather than a confirmed current price change. The optional Exam Preparation Program figures come from the current public FAQ and include course materials, which were not independently reviewed. Our ISP Certification Cost breakdown lays out the full spending picture.
Timeline mechanics
- Allow at least 30 days for application processing.
- After approval, the current Testing Process page provides six months to schedule and take the exam.
- Retesting requires a 30-day wait, with at most four attempts in any 12-month period.
Because the application review and the post-approval window both run on the clock, plan backward from the date you want to be certified. Our ISP Exam Dates guide covers scheduling in more detail.
Where the Credential Is Used
The ISP is relevant wherever classified work is performed outside government walls. That chiefly means cleared contractors, the private companies that hold facility clearances and perform on classified contracts, along with the security teams that support them. Typical roles include facility security officers, industrial security specialists, security managers and compliance or program-security staff.
Government customers and primes also have an interest in subcontractor security quality, which is why practitioners who can demonstrate command of NISP requirements are valued across the supply chain. The credential does not guarantee a particular position or pay level, and we avoid quoting earnings figures here. For the market side of the question, see ISP Jobs, the ISP Salary Guide and Is the ISP Certification Worth It?
Keeping the Credential Active
Certification is not permanent. Renewal requires 60 NCMS CEUs per three-year cycle, supporting documentation, and a fee of USD 75 for members or USD 125 for nonmembers.
- No more than 30 CEUs may come from membership or voluntary service.
- At least half must come from qualifying education, instruction, presentations or publications.
- NCMS applies its own CEU award schedule, so do not assume an hour of activity equals one CEU.
Submitting during the one-month late window doubles the fees. If the credential lapses beyond that, a fresh application and examination at full cost are required. Keep records as you go rather than reconstructing three years of activity at the deadline.
Key Takeaway
Treat renewal as an ongoing habit. Log training, briefings you deliver and articles you publish as they happen, and check how NCMS credits each activity before you count on it.
Reading Conflicting Information Correctly
If you research this certification, you may find older pages that contradict current rules. Some FAQ wording and residual clauses in the manual or brochure still mention two-hour testing, five years of experience, a supervisor letter or a one-year approval window. Dated changes and the current Testing Process guidance control:
- The experience threshold fell from five years to two on March 24, 2024.
- The supervisor recommendation letter was removed on June 11, 2024.
- Testing is 150 minutes, and the post-approval scheduling window is six months.
When two documents disagree, prefer the one with the most recent dated change and verify directly with NCMS before paying.
A Domain-Based Preparation Sequence
Rather than generic scheduling, order your study by how the categories depend on each other. This sequence is a suggestion, not an official plan; adapt it to your gaps. Our ISP Study Guide goes deeper on resources and technique.
Foundations
- Security Administration and Classification, since later topics assume this vocabulary
- Practice searching the approved reference PDFs
Protecting the Material
- Document Security and Physical Security
- Special Security Information
People and Borders
- Personnel Security and International Security
- Security Education
Systems and Verification
- Information Systems Security and NISP Systems (DISS, NISS, eApp, eMASS)
- Audits & Self-Assessments, then full timed practice under 150-minute conditions
Finish with timed practice. The pacing works out to well under two minutes per question, so rehearse making best-answer decisions at speed. Our ISP practice tests help you build that rhythm, and the ISP Cheat Sheet is useful for a final review. For a view of how candidates fare overall, see ISP Pass Rate: what the data shows.
Frequently Asked Questions
It means Industrial Security Professional, a certification issued by NCMS, Inc. that addresses protection of government classified information under the National Industrial Security Program. It is unrelated to other credentials or terms that share the acronym.
The exam has 110 multiple-choice questions in 150 minutes. The minimum passing score is 70%, with equal question weighting, best-answer scoring, no partial credit and no rounding.
No to both. You need two cumulative years of qualifying industrial-security experience, with relevant duties at least 10% of your workload. Membership only changes the fees you pay.
The exam fee is USD 275 for NCMS members and USD 400 for nonmembers. Retests cost USD 140 and USD 200 respectively. A USD 50 international surcharge appears in a June 2025 issuer presentation. The optional preparation program is separate.
Yes. Retesting requires a 30-day wait, and you may make at most four attempts in any 12-month period. Retest fees apply.
For a broader introduction to the credential, you can also read What Is ISP? and our overview of the ISP certification, or head to the main practice test site to start testing your knowledge across all 11 categories.