The document summarizes the changes made between the 2012 and 2015 versions of the CISSP Common Body of Knowledge (CBK). Specifically, it notes that the 2015 version reduced the number of domains from 10 to 8 and rearranged some content. It then provides a table mapping the new 8 domains to the relevant domains and portions of domains from the 2012 version to help students studying for the CISSP using 2012 material.

1. ANNEX 01: Mapping between the CISSP CBK 2012 and
the new CBK 2015
On the 15th of April 2015, a new version of the CBK was issued. This new version decreased
the number of domains from 10 to 8 and rearranged some of the content.
The change is mostly cosmetic, but a mapping between the two versions could help,
especially if you are studying using material that aligns to the 2012 version. Below there is
a simple table showing how the domain were shuffled and realigned within the new
version of the CISSP exam.
New Domain Name
Maps to the following domains or portion of the
domains of the old version
Security and Risk Management
• Information Security Governance & Risk
Management
• BCP & DRP
• Legal, Regulation, Compliance and
Investigation
Asset Security • Physical Security
Security Engineering
• Security Architecture and Design
• Cryptography
Communications & Network Security
• Telecommunication & Network Security
• Cryptography
Identity and Access Management • Access Control
Security Operations • Operations Security
Software Development Security • Application Development Security

2. The table above was authored by Clement Dupuis at CCCure and is used under authorisation by the
author, who retains any right over the content. © 2016 CCCure.