FITSM (Federal IT Security Manager) from the Federal IT Security Institute (FITSI) is a certification for managers responsible for information security in U.S. federal government systems. It’s built around federal laws, NIST guidance and the Risk Management Framework.
I hold the FITSI FITSM certification. On this page you’ll find what the exam covers, how I’d prepare if I were starting today, a free study plan, and ways to work with me if you want help getting across the line.
Get the free FITSM study plan ยท Book a session
How I passed
I hold the FITSI FITSM certification.
What the exam covers
The FITSM body of knowledge is built on federal security requirements, including:
- Federal IT security laws and regulations, including FISMA
- NIST guidance and the Risk Management Framework
- Security controls and their assessment
- Federal IT security roles and responsibilities
Exam details change. Check the official exam page before you book. Official FITSM page.
Who it’s for
Information security managers, ISSOs and ISSMs, and contractors who support U.S. federal agencies.
How to prepare
- Know the NIST Risk Management Framework steps and the documents that go with each.
- Get familiar with the key NIST special publications, especially SP 800-37 and SP 800-53.
- Learn the federal roles: authorizing official, ISSO, ISSM and system owner.
- Use FITSI’s published body of knowledge as your study checklist.
Free FITSM study plan
Get my step-by-step FITSM study plan by email: what to study each week, the resources worth your time, and a checklist for the week before the exam. It’s free.
[FORM: email signup for the FITSM study plan. Tag subscribers with “FITSM” so follow-up emails match this exam.]
FITSM course
If you’d rather follow a structured path, my FITSM course walks you through every exam domain with lessons, labs where they apply, and practice questions. You can also browse practice exams and guides in the store.
Book a session
Stuck on a domain, failed once already, or short on time? In a 1:1 session we go through where you are, what’s left, and a plan to get you to exam day. Book a session, or see 1:1 certification coaching. Training a team? Ask about corporate team training.
Verify
I hold the FITSI FITSM certification.
What to take next
Related certifications: