Security Governance

[SMURF]

Hello

  I have a question regarding Security Governance?

Is the list below what's covered on the 2025 CISSP exam or some were removed or more needs to be added?

BS 7799

ISO-17799

ISO-2700 Series

COBIT and COSO

OCTAVE

ITIL

[dcontesti]

I think that our friends in Exam Admin are best suited to answer this question but from my recollection, the exam can be fluid.

What I mean by that is the Common Body of Knowledge, outlines the areas that may be covered at a very high level and does not necessarily go down to the individual technology.

@CBMExamTeam would you be kind enough to provide a more accurate description????

Regards

d

[CBMExamTeam]

@SMURF @dcontesti 
Hi,

My best advice would be to refer to the CISSP Exam Outline (CISSP - English ) and the current training material. 

Although it will involve purchase if you don't already have it, you might also try one of our Official Study Guides https://www.isc2.org/certifications/cissp/cissp-self-study-resources#Textbooks

Wishing you the best with your exam!

[nkeaton]

I agree with the others that the exam objectives are the best to reference for what need to know.  It will not be granular on any framework but definitely should add NIST and COBIT when talking about frameworks.