New exam outline
CISSP: what changes in the new exam outline
A new CISSP exam outline takes effect on April 15, 2027. Here’s how the domain weights change, and which outline your exam will use.
- Current outline applies
- until April 14, 2027
- New outline applies
- from April 15, 2027
Last updated
Domain weights
What changed
Each domain’s share of the exam under the current outline and the new outline, as ISC2 publishes them.
| Domain | Current outline | New outline | Change |
|---|---|---|---|
| Security Governance and Risk ManagementWas: Security and Risk Management | Current outline16% | New outline13.6% | Change−2.4 points |
| Asset Security | Current outline10% | New outline12% | Change+2 points |
| Security Architecture and Engineering | Current outline13% | New outline12.8% | Change−0.2 points |
| Communication and Network Security | Current outline13% | New outline12.8% | Change−0.2 points |
| Identity and Access Management | Current outline13% | New outline13.6% | Change+0.6 points |
| Security Assessment and Testing | Current outline12% | New outline11.2% | Change−0.8 points |
| Security Operations | Current outline13% | New outline12.8% | Change−0.2 points |
| Software Development Security | Current outline10% | New outline11.2% | Change+1.2 points |
In short
- Asset Security grows the most, from 10% to 12% of the exam.
- Security Governance and Risk Management shrinks the most, from 16% to 13.6%.
- Security and Risk Management is now called Security Governance and Risk Management.
Weights come from ISC2’s exam guides. How we check our facts
Your exam
Which outline will your exam use?
Exams taken until April 14, 2027 use the current outline, and exams taken from April 15, 2027 use the new one. Study for the outline in force on the day you sit the exam.
FAQs
Got Questions? We’ve Got Answers.
Find quick answers or contact our support team.
Which outline will my CISSP exam use?
Exams taken until April 14, 2027 use the current outline, and exams taken from April 15, 2027 use the new one. Study for the outline in force on the day you sit the exam.
What changes in the new CISSP exam outline?
Asset Security grows the most, from 10% to 12% of the exam. Security Governance and Risk Management shrinks the most, from 16% to 13.6%. Security and Risk Management is now called Security Governance and Risk Management.
