Security Manager (ISSM)

For engineers and analysts stepping into the information systems security manager (ISSM) seat on a defense program. The track covers the fundamentals, the day-to-day work of running a security program under NIST SP 800-171 and DFARS, and preparation for an advanced management credential.

The track at a glance

Stage 1 — Security Fundamentals & CompTIA Security+ Prep

Threats, identity and access, secure architecture, hardening, incident response basics and governance, plus preparation for the CompTIA Security+ exam.

Stage 2 — Running the Security Program

Owning the System Security Plan and POA&M, continuous monitoring, configuration and change control, DFARS 252.204-7012 incident reporting, supplier flowdown, SPRS upkeep, policy and awareness, and tracking your team's DoD 8140 qualifications.

Stage 3 — Advanced Credential: ISC2 CISSP Prep

Preparation across the eight CISSP domains. Prefer CISM? Take the accredited ISACA CISM cohort from VIS instead, priced separately.

DoD 8140 alignment

The certifications this track prepares for appear in the DoD 8140 qualification matrix as foundational qualification options for these DCWF work roles:

Based on the DoD 8140 qualification matrix (version 2.1, effective 19 September 2025). The proficiency level a certification satisfies differs by work role, and your contract sets what applies, so we confirm it person by person in a Workforce Readiness Assessment. A certification covers foundational qualification only; resident (on-the-job) qualification and at least 20 hours a year of continuous professional development can also apply.

Roles you’ll be ready for

Information Systems Security Manager, security program manager, and IT project manager with security responsibility.

Frequently asked questions

Who is this track for?

Engineers, analysts and project leads taking on ISSM or security program responsibility for a defense contract.

Is this official CompTIA or ISC2 training?

No. VIS builds and teaches its own exam-preparation material and is not a CompTIA or ISC2 training partner. Exam vouchers are bought separately. The CISM option is delivered by VIS as an accredited ISACA Training Organization.

Do I have enough experience for CISSP?

CISSP requires five years of cumulative paid work experience in two or more of its eight domains, and a degree or approved credential can count for one year. If you pass without the experience, you become an Associate of ISC2 while you build it.

How is it delivered?

Live-virtual, instructor-led cohorts. Cohorts run once minimum enrollment is met; next dates announced soon.