ISTQB CT-SEC: Security Testing Through Risk and Evidence
ISTQB CT-SEC remains an active Security Tester certification in the ISTQB specialist portfolio. It is an experienced-practitioner qualification rather than an introductory cybersecurity exam: candidates must hold Foundation Level certification and have at least three years of relevant academic, practical, or consulting experience. The examination contains 45 questions worth 80 points, requires 52 points to pass, and allows 120 minutes of standard testing time. The syllabus approaches security testing from several perspectives at once. Candidates examine security risk, policies and procedures, auditing, security test strategies, mechanisms, human factors, evaluation and…
ISTQB CT-PT: Performance Testing Beyond Load Generation
ISTQB CT-PT is the specialist Performance Testing qualification for practitioners who need to reason about speed, capacity, stability, and resource use as measurable quality risks. The current official syllabus remains version 1.0 from 2018. The examination has 40 questions, a passing score of 26 points, and 90 minutes of standard testing time, with Foundation Level certification required before the specialist credential can be awarded. Performance testing is sometimes reduced to running a large number of virtual users against a system. The syllabus is broader. Candidates need to define performance risks…
ISTQB CT-GenAI: Prompting, Evaluation, and Responsible Test Use
ISTQB CT-GenAI addresses a problem that many testing teams are already facing: generative AI can accelerate analysis, design, automation, and reporting, but useful output is not the same as trustworthy output. The current specialist syllabus is version 1.1 and the examination uses 40 questions, 46 available points, a passing score of 30 points, and 60 minutes of standard testing time. Foundation Level certification is the prerequisite. The qualification is deliberately different from a general course about artificial intelligence. Its focus is how testers and quality engineers use large language models…
ISTQB CT-AI v2.0: Testing Probabilistic Systems With Evidence
ISTQB CT-AI v2.0 is the current AI Testing certification and replaces the earlier v1.0 syllabus. The older version is still in a formal sunset period, with English exams scheduled to end on April 21, 2027 and non-English exams on October 21, 2027. Candidates preparing now should therefore verify the syllabus version with their exam provider instead of assuming that any material labeled “AI Testing” represents the current learning objectives. The current ISTQB CT-AI v2.0 exam contains 40 questions worth 44 points, requires 29 points to pass, and allows 60 minutes…
ISTQB CT-AcT: Acceptance Testing as a Shared Discipline
ISTQB CT-AcT focuses on the point where a product is judged against business needs rather than only against technical implementation. The certification is designed for testers, product owners, business analysts, developers, test managers, and others who participate in acceptance decisions. Its value is the shared language it creates around acceptance criteria, acceptance tests, business rules, process models, and collaboration. The current ISTQB CT-AcT syllabus remains version 1.0 from 2019. The exam has 40 questions, requires 26 points to pass, and provides 60 minutes before any approved non-native-language extension. Candidates must…
ISTQB ATM and Modern Advanced Test Management
The ExamSnap ISTQB ATM page reflects the older Advanced Test Manager shorthand. The current qualification is Certified Tester Advanced Level Test Management, published as ISTQB CTAL-TM v3.0. The older 2012 syllabus has completed its sunset period, so new candidates should build their preparation around the v3.0 role and materials rather than treating test management as a lightly updated version of the previous exam. The current ISTQB CTAL-TM exam has 50 questions, 88 available points, a passing score of 58, and a standard duration of 120 minutes. Candidates need an ISTQB…
ISTQB ATA: The Test Analyst Path After v4.0
The ExamSnap ISTQB ATA page uses the older Advanced Test Analyst shorthand, while ISTQB now publishes the qualification as Certified Tester Advanced Level Test Analyst. The current release is ISTQB CTAL-TA v4.0, issued in May 2025. For English examinations the previous v3.1 route ended on May 16, 2026; non-English v3.1 examinations remain in a final transition window only until November 16, 2026. Candidates preparing in late 2026 therefore need to be precise about which syllabus their exam provider is actually delivering. The current ISTQB CTAL-TA exam contains 45 questions worth…
ISTQB CTFL-001 and the Modern Foundation Level
The ExamSnap URL for ISTQB CTFL-001 reflects a long-used exam identifier for the Certified Tester Foundation Level. Candidates preparing now should not mistake that legacy identifier for the current syllabus label. ISTQB’s active Foundation Level is version 4.0, with the official syllabus currently published as v4.0.1. That distinction matters because the modern qualification has been rewritten around today’s software-delivery environment rather than frozen around an older testing vocabulary. The current ISTQB CTFL v4.0 exam uses 40 questions, a passing score of 26 points, and a standard testing time of 60…
ISTQB CTAL-TM-Syll2012: Legacy Test Management and the v3.0 Transition
ISTQB CTAL-TM-Syll2012 is a legacy exam identifier for the 2012 Advanced Level Test Manager syllabus. It should not be presented as a current booking target. ISTQB released Certified Tester Advanced Level Test Management v3.0 as the prevailing version and sunset the 2012 English syllabus, exams, and accredited training on May 30, 2025, followed by other languages on November 30, 2025. The ISTQB CTAL-TM-Syll2012 page therefore has historical and transition value. It can help experienced testers understand the older framework and map durable ideas into today’s ISTQB certifications, but current candidates…
ISM LEAD: Leadership and Transformation in Supply Management
ISM LEAD is the exam label associated with Leadership and Transformation in Supply Management, one of the examinations in the Certified Professional in Supply Management pathway. It focuses on business acumen, stakeholder engagement, people development, technology, risk, compliance, and corporate social responsibility rather than on transactional purchasing alone. Candidates should view it as the strategic and organizational portion of the broader CPSM body of knowledge. The ISM LEAD page sits within the ISM certifications ecosystem. Current timing matters because ISM is transitioning certification materials: its third-edition Leadership and Transformation exam…
ISC2 SSCP: Operating and Administering Security in Practice
ISC2 SSCP is an operational security certification for professionals who implement, monitor, and administer security controls in real IT environments. The current exam outline became effective October 1, 2025 and covers seven domains: security concepts and practices, access controls, risk identification and monitoring, incident response and recovery, cryptography, network and communications security, and systems and application security. The ISC2 SSCP page should be positioned as a hands-on practitioner resource rather than a smaller version of the broader ISC2 CISSP. The certifications overlap in foundational concepts, but the operational credential focuses…
ISC2 CSSLP: Engineering Security Through the Software Lifecycle
ISC2 CSSLP validates the ability to integrate security across the software development lifecycle rather than bolt controls onto applications after coding is complete. The current outline, effective September 15, 2023, covers eight domains from secure software concepts and lifecycle management through requirements, architecture, implementation, testing, deployment, operations, maintenance, and software supply chain security. The ISC2 CSSLP page belongs in the broader ISC2 certifications ecosystem, but its perspective is distinct. The credential is aimed at professionals who influence how software is specified, designed, built, tested, released, and maintained. That includes security…
ISC2 ISSMP: Directing Security Programs Through Risk and Operations
ISC2 ISSMP is an advanced certification for professionals who direct information security programs and connect security leadership with organizational strategy. The current outline became effective August 1, 2025 and covers leadership and organizational management, systems lifecycle management, risk management, security operations, contingency management, and law, ethics, and compliance. The emphasis is executive-level security judgment supported by operational understanding. The ISC2 ISSMP page should reflect the current qualification model rather than the older idea that the certification is available only as a CISSP concentration. ISC2 now supports both the CISSP-plus-relevant-experience route…
ISC2 ISSEP: Engineering Security Across Complex System Lifecycles
ISC2 ISSEP is an advanced certification for professionals who apply systems-engineering principles to security. The current outline, effective August 1, 2025, organizes the work around systems security engineering foundations, risk management, security planning and engineering, implementation and verification, and secure operations through change and disposal. Its emphasis is not simply knowing security controls but engineering assurance into complex systems. The ISC2 ISSEP page should reflect the current qualification model. Candidates can follow the CISSP-plus-experience route or qualify through the seven-year non-CISSP experience path introduced by ISC2. Either way, the experience…
ISC2 ISSAP: Designing Security Architecture Around Business Risk
ISC2 ISSAP is an advanced security-architecture certification for professionals who design security solutions and provide risk-based guidance to management. The current exam outline became effective August 1, 2025 and organizes the work into four domains: governance, risk, and compliance; security architecture modeling; infrastructure and system security architecture; and identity and access management architecture. The ISC2 ISSAP page should no longer be described only as a CISSP concentration. ISC2 created an additional non-CISSP pathway in 2023: experienced professionals can qualify through seven years of relevant work, while CISSP holders can use…
