- The Short Answer: Industrial Security Professional
- Why the Acronym Causes Confusion
- What the Credential Actually Protects
- Who Issues It and How It Is Delivered
- The Eleven Examination Categories
- How the Exam Is Built
- Who Can Sit for It
- Fees and Registration Mechanics
- Where ISP Holders Work
- Keeping the Credential Active
- Reading Conflicting Information Correctly
- A Domain-Based Preparation Sequence
- Frequently Asked Questions
- ISP stands for Industrial Security Professional, a certification issued by NCMS, Inc., The Society of Industrial Security Professionals.
- The credential centers on protecting government classified information under the U.S. National Industrial Security Program.
- The exam has 110 multiple-choice questions in 150 minutes, with a 70% minimum passing score.
- Eligibility requires two cumulative years of qualifying experience; NCMS membership and current industrial-security employment are not required.
The Short Answer: Industrial Security Professional
On this site, ISP stands for Industrial Security Professional. The full name of the credential is the Industrial Security Professional Certification, and it is awarded by NCMS, Inc., The Society of Industrial Security Professionals. It is a professional certification for people who protect classified government information in the private sector, not a general technology or business designation.
If you landed here hoping for a quick definition, that is it. If you want to understand what the credential covers, who qualifies, how the exam is structured, and what it costs, keep reading. For related background, you can also see our companion explainers on what ISP is and what ISP certification involves.
Why the Acronym Causes Confusion
The letters "ISP" are shared by several unrelated terms and credentials across different industries. Searching the acronym on its own returns a mixed bag of results, and each of those belongs to a different field with different rules, different exams, and different governing bodies.
This matters practically. A candidate who budgets using another certification's fee schedule, or studies another credential's body of knowledge, will arrive unprepared. Always confirm that a resource names NCMS and the National Industrial Security Program before trusting it. Our ISP meaning and what does ISP mean pages address the same disambiguation from other angles.
What the Credential Actually Protects
The Industrial Security Professional credential addresses the protection of government classified information under the U.S. National Industrial Security Program (NISP). In plain terms, when the federal government shares classified information with private contractors so they can perform on defense and other sensitive contracts, those contractors must safeguard it according to strict program rules. People who run those safeguards inside companies are industrial security professionals.
That daily work includes:
- Administering a facility's security program and keeping it aligned with government requirements
- Controlling classified documents and materials through their lifecycle
- Protecting the information systems that process classified data
- Managing personnel clearances and the processes behind them
- Running security education for employees
- Preparing for and responding to government oversight, audits, and self-assessments
The certification exists to demonstrate that a practitioner has mastered this body of knowledge, rather than simply having encountered it on the job.
Who Issues It and How It Is Delivered
The certifying body is NCMS, Inc., The Society of Industrial Security Professionals. NCMS also offers membership, education, and an optional Exam Preparation Program, but the certification itself does not require you to be a member.
The exam is delivered through Prometric. Candidates can test at a Prometric test center or take the exam remotely using ProProctor remote proctoring. The logistics differ by mode:
| Delivery Mode | What You Need |
|---|---|
| Prometric test center | Valid government-issued photo identification that includes a signature |
| Remote proctoring (ProProctor) | A compatible computer, a camera, a microphone, and a reliable internet connection |
Plan your testing environment well ahead of exam day, particularly if you choose remote delivery. A technical problem on the day is an avoidable source of stress.
The Eleven Examination Categories
The program manual lists eleven examination categories. Together they define the knowledge a candidate must carry into the exam room. For a deeper walk-through of each, see our complete guide to the 11 ISP content areas.
- Security Administration
- Document Security
- Information Systems Security
- Physical Security
- Personnel Security
- International Security
- Classification
- Security Education
- Audits & Self-Assessments
- Special Security Information
- NISP Systems
Security Administration and Classification
These two areas anchor the program's vocabulary. Security Administration covers how a cleared facility's security function is organized and run; Classification covers how information earns its protection level in the first place.
- Know the program's structure and the roles within a cleared facility
- Understand why information is classified and how that determination flows to contractors
Document Security and Information Systems Security
One governs paper and physical media; the other governs the computers and networks that handle classified data. Questions often test whether you can apply the correct handling rule to a realistic situation.
- Be fluent in marking, handling, storage, and transmission of classified material
- Understand the safeguards required for systems processing classified information
NISP Systems
The public program manual names specific government systems candidates should recognize: DISS, NISS, eApp, and eMASS. You should understand what each system is used for and where it fits in the security workflow.
- Match each named system to its purpose
- Watch issuer announcements, since system replacements may change what the exam emphasizes
One important caution: the issuer's public sources do not publish percentage allocations for each category. Because every question carries equal weight, it is tempting to assume each category is equally represented. That inference is not supported. Prepare across all eleven areas rather than gambling on a few.
How the Exam Is Built
The revised exam launched on April 15, 2025. Its published structure is straightforward:
| Feature | Detail |
|---|---|
| Number of questions | 110 multiple-choice |
| Time allowed | 150 minutes |
| Minimum passing score | 70% |
| Question weighting | Equal for every question |
| Scoring method | Best-answer; no partial credit; no rounding of final scores |
Best-answer scoring deserves attention. Several options may look plausible, but one is the most correct under program rules. That rewards candidates who know the reasoning behind a requirement, not just a memorized phrase. Read more about what that cutoff means in our ISP passing score guide.
The Open-Book Element
The exam allows limited open-book access. You may use approved, searchable electronic reference PDFs supplied inside the testing interface. External online resources are not allowed, and neither is consulting other people. In practice, the references are a safety net for locating a specific rule, not a substitute for understanding. With 110 questions in 150 minutes, you have limited time per item, so hunting through documents for every answer is not workable.
Key Takeaway
Treat the supplied references as a way to confirm details, not to learn material on the fly. Practice searching the reference documents quickly so that lookup becomes a fast verification step rather than a time sink. You can gauge your readiness against realistic questions on our ISP practice test site.
Who Can Sit for It
Eligibility is based on experience. Candidates need two cumulative years of qualifying industrial-security experience, and the relevant duties must make up at least 10% of their workload. Military or police service can count, but only if it included qualifying industrial-security work.
Two points often surprise candidates:
- You do not need to be currently employed in industrial security to apply.
- You do not need to be an NCMS member to apply.
The application package includes a detailed resume, a signed Candidate Confidentiality & Conflict of Interest (CCOI) agreement, the application itself, and payment. After passing the exam, a post-pass CCOI step completes certification. For the full breakdown, see our ISP requirements guide.
Fees and Registration Mechanics
Costs differ for NCMS members and nonmembers, and the published figures are as follows:
| Item | NCMS Member | Nonmember |
|---|---|---|
| Exam fee | USD 275 | USD 400 |
| Retest fee | USD 140 | USD 200 |
| Optional Exam Preparation Program | USD 50 | USD 100 |
The issuer's June 4, 2025 preparation presentation also lists a USD 50 international surcharge. That is a dated published fee rather than a separately verified current-year change, so confirm it directly with NCMS if it applies to you. The Exam Preparation Program is optional; the public FAQ figures above include course materials, though those materials were not reviewed for this article. A fuller accounting lives in our ISP certification cost breakdown.
Timing Rules
- Allow at least 30 days for application processing.
- After approval, you have six months to schedule and take the exam, per the current Testing Process page.
- If you need to retest, you must wait 30 days, and you may make at most four attempts in any 12-month period.
Those windows interact with your study plan. Do not submit an application and then let the six-month clock run down while you are still starting your preparation. Our ISP exam dates and scheduling guide covers the timeline in more detail.
Where ISP Holders Work
Because the credential is rooted in the National Industrial Security Program, it fits the roles that sit between government classified work and private industry. The typical employer is a company that holds or supports classified contracts and therefore maintains a security function. Common settings include defense contractors, firms supporting federal programs, and organizations that employ facility security personnel responsible for NISP compliance.
The people who benefit most are those who run or support these security programs: facility security staff, security managers, and compliance-minded practitioners who interact with government oversight. If you are exploring openings, see our overview of ISP jobs, and for earnings context, our ISP salary guide and ROI analysis take a closer look without relying on guesswork.
Keeping the Credential Active
Certification is not permanent. Renewal runs on a three-year cycle and requires:
- 60 NCMS continuing education units (CEUs) per cycle
- Supporting documentation for those credits
- A renewal fee of USD 75 for members or USD 125 for nonmembers
There are limits on how you earn those CEUs. No more than 30 may come from membership or voluntary service, and at least half must come from qualifying education, instruction, presentations, or publications. NCMS applies its own CEU award schedule, so credit is not simply one hour for one unit.
A newer edition of the recertification credit guide was referenced by the issuer, but its contents could not be independently verified, so this article does not assume any updated renewal rules beyond those above. Confirm current requirements directly with NCMS before planning your credits.
Reading Conflicting Information Correctly
If you research this credential, you will find contradictory details. Some older FAQ wording and residual clauses in manuals and brochures still mention a two-hour test, five years of required experience, a supervisor recommendation letter, or a one-year approval window. These are outdated.
The dated changes control:
- The experience requirement dropped from five years to two on March 24, 2024.
- The supervisor recommendation letter was removed on June 11, 2024.
- The exam runs 150 minutes, and the approval window to test is six months.
It is also worth knowing that NCMS ended the ISP's ANAB accreditation in March 2024 while continuing the certification program itself. When two sources disagree, favor the most recent dated announcement and the current Testing Process page.
A Domain-Based Preparation Sequence
Rather than a generic schedule, structure your preparation around how the domains depend on one another. Foundational concepts first, specialized systems last. For deeper tactics, our ISP study guide expands on this approach.
Foundations
- Security Administration and Classification, since later domains build on their vocabulary
- Security Education, which reinforces how programs are communicated
Protection of Information and People
- Document Security and Physical Security
- Personnel Security
Systems and Specialized Topics
- Information Systems Security and NISP Systems
- International Security and Special Security Information
Assessment and Review
- Audits & Self-Assessments, then timed mixed practice across all eleven areas
- Drill searching the reference PDFs under time pressure
Because category weights are not published, finish with mixed practice rather than lingering on favorites. If you want to understand how demanding the process is before committing, read how hard the ISP exam is and what the available data says in our pass rate analysis. For a condensed review, our ISP cheat sheet collects the must-know facts, and you can test yourself on the main practice exam platform.
Frequently Asked Questions
ISP stands for Industrial Security Professional, a certification issued by NCMS, Inc., The Society of Industrial Security Professionals. It relates to protecting classified government information under the National Industrial Security Program. More background is available on our what does ISP stand for page.
No. Membership is not required to apply. Members do pay lower fees: USD 275 for the exam versus USD 400 for nonmembers, with correspondingly lower retest and renewal costs.
The exam has 110 multiple-choice questions to be completed in 150 minutes. The minimum passing score is 70%, with equal weighting per question, best-answer scoring, no partial credit, and no rounding of final scores.
Two cumulative years of qualifying industrial-security experience, with relevant duties making up at least 10% of your workload. Older materials that mention five years are outdated, as the threshold dropped on March 24, 2024. You do not need to be currently employed in industrial security.
You can retest after a 30-day wait, paying USD 140 as a member or USD 200 as a nonmember. You may make at most four attempts in any 12-month period, so use the waiting time to review weaker domains before trying again.