On April 15, 2024, ISC2 will refresh the CISSP credential exam. These updates are the result of the Job Task Analysis (JTA), which is an analysis of the current content of the credential evaluated by ISC2 members on a triennial cycle. For more information on this process and upcoming update, please review the FAQs below.
Q: Why is the CISSP exam changing?
A: ISC2 believes it is the best interest of its members to maintain the relevancy of its credentials. These changes are the result of a lenghty, methodical process that ISC2 follows to routinely update its credential exams. This process ensures that the examinations and continuing professional education requirements encompass the topic areas relevant to the roles and responsibilities of current practicing cybersecurity professionals with the knowledge, skills and abilities to lead an organization’s information security program.
Q: How is the CISSP exam changing?
A: Domain 1: Security and Risk Management has increased in weight from 15% to 16% while Domain 8: Software Development Security has decreased in weight from 11% to 10%. More detailed differences to the tasks and subtasks can be found in the exam outline.
On April 15, 2024 the domain weights will update as follows:
| Domains | Previous Weight | Weight Effective April 15, 2024 |
|---|---|---|
| DOMAIN 1 | ||
| Security and Risk Management | 15% | 16% |
| DOMAIN 2 | ||
| Asset Security | 10% | 10% |
| DOMAIN 3 | ||
| Security Architecture and Engineering | 13% | 13% |
| DOMAIN 4 | ||
| Communication and Network Security | 13% | 13% |
| DOMAIN 5 | ||
| Identity and Access Management (IAM) | 13% | 13% |
| DOMAIN 6 | ||
| Security Assessment and Testing | 12% | 12% |
| DOMAIN 7 | ||
| Security Operations | 13% | 13% |
| DOMAIN 8 | ||
| Software Development Security | 11% | 10% |
Q: When will these changes begin?
A: The CISSP exam will be based on the updated exam outline on April 15, 2024.
Q: In what language will the new CISSP exam be available?
A: The CISSP exam will be updated in all available languages. Currently, the CAT (Computerized Adaptive Testing) format is available in English and Chinese. Effective April 15, 2024, the German, Japanese and Spanish translations of the exam will also transition from the linear format to the CAT format.
Q: What else is changing on the exam?
A: The number of items on the exam and the time limit for the exam administration will also change. The time limit for the CAT exam will be a maximum of three (3) hours. Candidates taking the CAT version of the exam will see a minimum of 100 and a maximum of 150 items. There will no longer be a linear version of the exam.
Q: If I have been studying for the CISSP exam with material that focuses on the Domains, will I be sufficiently prepared to take the new exam without additional study?
A: ISC2 exams are experiential and include experience-based questions that cannot be learned by studying alone. If you already have experience in the domains covered in CISSP and believe that you have sufficiently studied those domains, you should feel confident that you are qualified to take the new exam and pass it.
Q: When will the training material for CISSP be updated to reflect these changes?
A: The Official ISC2 CISSP training material has been updated as of April 1, 2024, to reflect the changes to the exam outline that will be implemented April 15, 2024.