Exam domains
What the exam covers
Each domain’s share of the exam, as ISC2 publishes it, for each version you can take. Study for the one in force on your exam date.
Current outline
Until April 14, 2027
1Security and Risk Management
16%
3Security Architecture and Engineering
13%
4Communication and Network Security
13%
5Identity and Access Management
13%
6Security Assessment and Testing
12%
8Software Development Security
10%
New outline
From April 15, 2027
1Security Governance and Risk Management
13.6%
3Security Architecture and Engineering
12.8%
4Communication and Network Security
12.8%
5Identity and Access Management
13.6%
6Security Assessment and Testing
11.2%
7Security Operations
12.8%
8Software Development Security
11.2%
What changes in the new outline