CISSP Exam Changes Coming April 2027

10 minutes ago

1 min read

ISC2 is updating the CISSP exam effective April 15, 2027. While there are some changes to domain weights and technical topics, the overall exam remains largely the same.

The eight domains aren't changing, and the foundational security concepts you’re already studying will still apply.

What's Changing?

The biggest domain weight adjustments include:

Domain 1: Decreases from 16% to 13.6%
Domain 2: Increases from 10% to 12%
Domain 8: Increases from 10% to 11.2%

The remaining domains have relatively minor adjustments.

ISC2 is also placing more explicit emphasis on several technologies and security practices, including:

AI Security: AI ethics, adversarial AI, model poisoning, and deepfakes
Cloud Security: Cloud-Native Application Protection Platforms (CNAPP)
Cryptography: Post-quantum cryptography and quantum computing
Identity Management: Passkeys, FIDO, WebAuthn, and risk-adaptive access control
Security Operations: EDR, XDR, and immutable backups
Software Security: SBOMs, shift-left security, and memory-safe programming languages

Many of these concepts were already relevant to the CISSP. The updated outline simply makes them more explicit.

What Does This Mean for Your Studies?

If you're taking the exam before April 15, 2027, continue following the current outline. If you're testing on or after that date, use the updated version.

There's no need to start over or completely change your study strategy. Focus on mastering the eight domains and familiarizing yourself with the newly emphasized topics.

Relevant updates will continue to be incorporated into the Study Notes and Theory CISSP course and AI Security Expansion Pak.

The CISSP is evolving, but the fundamentals remain the same.