On April 15, 2024, ISC2 will refresh the CISSP credential exam. These updates are the result of the Job Task Analysis (JTA), which is an analysis of the current content of the credential evaluated by ISC2 members on a triennial cycle. The domain weights for the CISSP will change as noted below:
|
|
Current (Effective May 1, 2021)
|
Effective April 15, 2024
|
|
1
|
Security and Risk Management
|
15%
|
16%
|
|
2
|
Asset Security
|
10%
|
10%
|
|
3
|
Security Architecture and Engineering
|
13%
|
13%
|
|
4
|
Communication and Network Security
|
13%
|
13%
|
|
5
|
Identity and Access Management (IAM)
|
13%
|
13%
|
|
6
|
Security Assessment and Testing
|
12%
|
12%
|
|
7
|
Security Operations
|
13%
|
13%
|
|
8
|
Software Development Security
|
11%
|
10%
|
|
|
Total:
|
100%
|
100%
|
As detailed above, Domain 1, Security and Risk Management, has increased in weight from 15% to 16% while Domain 8, Software Development Security, has decreased in weight from 11% to 10%.
Additionally, effective April 15, 2024, the time limit for the CAT exam will be a maximum of three (3) hours. Candidates taking the CAT version of the exam will see a minimum of 100 and a maximum of 150 items. The linear exam length will remain 6 hours for 225 scored items. Candidates taking the linear version of the exam will receive 225 total items.
For more information, please review our CISSP Exam Refresh FAQs or the CISSP Exam Outline.
ISC2 Community Manager
