Skip to content
CybersecurityDegrees
Carnegie Mellon University logo

Carnegie Mellon University · Heinz College of Information Systems and Public Policy

Master of Science in Information Security Policy and Management

Master'sMSDedicated degreeOn campus

Overview

A two-year, four-semester in-person Master of Science at Heinz College covering information security management, risk, cryptography, network security and policy, with a required summer internship and a capstone project or thesis.

Official program name
Master of Science in Information Security Policy and Management
Awarded degree
Master of Science · major: Information Security Policy and Management
Source: heinz.cmu.edu · verified October 11, 2026
Degree level
Master's
Cybersecurity focus
Dedicated cybersecurity degreeThe degree itself is in cybersecurity or a closely related security field (information security, information assurance, cyber operations, digital forensics…).
Source: heinz.cmu.edu · verified October 11, 2026
School
Source: heinz.cmu.edu · verified October 11, 2026
Location
Pittsburgh, PA
Specializations
Cybersecurity Management — core of the degree (“Information Security Policy and Management”)
Tracks / concentrations
AI Management Concentration (optional)
Source: heinz.cmu.edu · verified October 11, 2026
Orientation
Technical and management
Source: heinz.cmu.edu · verified October 11, 2026
Required credits
Not verified
Duration
Two years, four semesters
Source: heinz.cmu.edu · verified October 11, 2026
Why this program is listed

Dedicated information security master's at Heinz College, delivered in person.

Degree title names information security; core includes Intro to Information Security Management, Information Security Policy & Management, Information Security Risk Management, Cryptography, Network and Internet Security, and Software and Security.

Source: heinz.cmu.edu · verified October 11, 2026

We list cybersecurity bachelor's, master's and research doctorates at institutionally accredited US schools — dedicated degrees and formal concentrations, never certificates or electives-only degrees. Eligibility rules

Format and attendance

Formats, online delivery, campus visits, internships and class schedule are shown separately, each only as the school states it.
Formats offered
On campus
Source: heinz.cmu.edu · verified October 11, 2026
Internship
Internship / practicum required
Source: heinz.cmu.edu · verified October 11, 2026
Study intensity
Not verified

Curriculum

Capstone

  • Capstone project for a real client, or Information Security Thesis
    Source: heinz.cmu.edu · verified October 11, 2026

Internship

Admissions

Required, optional, waived and not-required items are shown exactly as the school states them. Anything not listed is not verified — not “not required”.
Prior degree
RequiredBachelor's degree from a regionally accredited institution (or equivalent) before starting
Source: heinz.cmu.edu · verified October 11, 2026
Statement / essay
RequiredRequired essay
Source: heinz.cmu.edu · verified October 11, 2026
Recommendation letters
Required2 letters — Two recommendations
Source: heinz.cmu.edu · verified October 11, 2026
Résumé / CV
RequiredResume
Source: heinz.cmu.edu · verified October 11, 2026
Interview
OptionalShort video interview, optional but strongly recommended
Source: heinz.cmu.edu · verified October 11, 2026
Application fee
Not requiredNo application fee
Source: heinz.cmu.edu · verified October 11, 2026

Tests

GRE General Test
RequiredGRE or GMAT required unless the applicant qualifies for a waiver (e.g. evidence of prior quantitative coursework, CMU undergraduate degree)
Source: heinz.cmu.edu · verified October 11, 2026
GMAT
RequiredAccepted in place of the GRE; waiver possible
Source: heinz.cmu.edu · verified October 11, 2026
TOEFL iBT
RequiredRequired for non-native English speakers (TOEFL, IELTS or Duolingo), with listed exceptions
Source: heinz.cmu.edu · verified October 11, 2026

We do not publish acceptance rates or estimate admission chances.

Start dates and deadlines

Dates are shown with the term the school printed. A past date is marked passed and is never carried into a new cycle.

  • Application deadline

    December 1, 2026 · for Fall 2027

    Source: heinz.cmu.edu · verified October 11, 2026
    Upcoming

  • Application deadline

    January 10, 2027 · for Fall 2027

    Source: heinz.cmu.edu · verified October 11, 2026
    Upcoming

  • Scholarship deadline

    February 1, 2027 · for Fall 2027

    Source: heinz.cmu.edu · verified October 11, 2026
    Upcoming

Tuition and fees

Each amount keeps its student category, academic year and basis. Per-credit, per-term and whole-program figures are not comparable with each other, and tuition is not the full cost of attendance.
CategoryAmountBasis and year
All students — Master of Science in Information Security Policy & Management (MSISPM)From the school-wide rate table for this level$29,570per semester · 2026-2027Source: cmu.edu · verified October 11, 2026

Other published fees

Fees (per semester, 2026-2027)
$520 per semester
Source: cmu.edu · verified October 11, 2026

Scholarships and funding

Awards published by the school for this program or for its level. Loans must be repaid and are not scholarships; service scholarships require government service after graduation. Scholarships & funding guide

  • CyberCorps Scholarship for Service (SFS@CMU) Service scholarship

    Full-tuition scholarship, academic year stipend of $37,000 per year, up to $4,000 per year for professional development

    Eligibility: U.S. citizens or lawful permanent residents enrolled full-time in the MSIS or MSAIE-IS program, eligible for federal employment and able to obtain a security clearance

    Obligation: Work after graduation for an eligible employer in a cybersecurity-related position for a period equal to the length of the scholarship

    Source: cmu.edu · verified October 11, 2026

  • INI tuition scholarships Institutional scholarship

    Partial and full tuition scholarships

    Eligibility: All accepted INI applicants are considered

    Source: cmu.edu · verified October 11, 2026

School-wide awards are listed because they apply at this degree level; eligibility conditions apply.

Accreditation, ABET and CAE

Three different things: the school's institutional accreditation, ABET accreditation of this exact program, and the school's NSA CAE designation.

Institutional accreditation

  • Middle States Commission on Higher Education (MSCHE) — accreditedSource: ope.ed.gov · verified October 10, 2026

ABET program accreditation

This program does not appear in ABET's accredited-program database. ABET accreditation is program-specific and optional; the school's other programs or its institutional accreditation do not imply it.

NSA CAE designation (school)

  • CAE in Cyber Defense (CAE-CD) · 2000 - 2027Validated program(s) of study: Master of Science in Information Security (POS-CD); M.S. in Information Security, Specialization in Cyber Operations (POS-CO)Source: maps.caecommunity.org · verified October 11, 2026
  • CAE in Cyber Operations (CAE-CO) · 2013 - 2030Validated program(s) of study: Master of Science in Information Security (POS-CD); M.S. in Information Security, Specialization in Cyber Operations (POS-CO)Source: maps.caecommunity.org · verified October 11, 2026
  • CAE in Cyber Research (CAE-R) · 2009 - 2029Validated program(s) of study: Master of Science in Information Security (POS-CD); M.S. in Information Security, Specialization in Cyber Operations (POS-CO)Source: maps.caecommunity.org · verified October 11, 2026

A CAE designation belongs to the institution and its validated program of study; it is not accreditation and does not certify every degree. Accreditation & CAE explained

Sources and verification

Every fact on this page comes from the official pages and directories below. Last verified October 11, 2026.
  1. NCAE-C institution directory (National Centers of Academic Excellence in Cybersecurity) — Source, verified October 11, 2026
  2. DAPIP — MSCHE institutional accreditation record (data files downloaded 2026-10-10) — U.S. Department of Education dataset (IPEDS / DAPIP), verified October 10, 2026
  3. cmu.edu/ini/about/sfs.html — Official program page, verified October 11, 2026
  4. cmu.edu/ini/admissions/financial/index.html — Official admissions page, verified October 11, 2026
  5. cmu.edu/sfs/tuition/graduate/index.html — Official tuition and fees page, verified October 11, 2026
  6. heinz.cmu.edu/programs/information-security-policy-management-master/ — Official program page, verified October 11, 2026
  7. heinz.cmu.edu/programs/information-security-policy-management-master/admissions-how-to-apply — Official admissions page, verified October 11, 2026
  8. heinz.cmu.edu/programs/information-security-policy-management-master/right-for-me — Official program page, verified October 11, 2026

Something out of date? Request a correction · Represent this school? Claim the profile

Similar programs at other schools

Same degree level and focus. Listed for discovery, not ranked.

Bellevue University logo

Bellevue University

Master of Science in Cybersecurity

Master'sMSDedicated degreeMaster of Science
Format: Campus · Online · Asynchronous
Location: Bellevue, NESchool location, not a residency requirement
Attendance: Online attendance requirements not verified
Duration: Duration not verified · 36 credits
Tuition: $680 per credit · All students — Graduate, per credit hour
Next deadline: No upcoming verified deadline
Accreditation and designation: School designated CAE-CDNSA CAE designation of the institution, not accreditation
Specializations: Governance, Risk & Compliance · Cybersecurity Management
View program

Champlain College

Master of Science in Cybersecurity Management

Master'sMSDedicated degreeMaster of Science
Format: Fully online
Location: Burlington, VTSchool location, not a residency requirement
Attendance: Fully online as published (no separate campus-visit statement)
Duration: 10 months estimated time to completion with 2 courses per term (2 courses per term) · 30 credits
Tuition: $608 per credit · All students — Online graduate tuition, Fall '26 - Summer '27 · 2026-2027
Next deadline: December 29, 2026 · Spring 2027 (term 1, Jan 11)
Accreditation and designation: School designated CAE-CDNSA CAE designation of the institution, not accreditation
Specializations: Cybersecurity Management
View program
Augusta University logo

Augusta University

Master of Science, Cybersecurity Management and Technology

Master'sMSDedicated degreeMaster of Science
Format: Fully online · Asynchronous
Location: Augusta, GASchool location, not a residency requirement
Attendance: Fully online as published (no separate campus-visit statement)
Duration: Duration not verified · 30 credits
Tuition: $238 per credit · In-state — Online MS, in-state, per credit
Next deadline: No upcoming verified deadline
Accreditation and designation: School designated CAE-CD, CAE-CONSA CAE designation of the institution, not accreditation
Specializations: Cybersecurity Management
View program

Cybersecurity Degrees is independent and not affiliated with Carnegie Mellon University. Information is collected from official pages and directories and can change; confirm requirements, costs and deadlines with the school.