The Certified Information Systems Security Professional (CISSP) exam is structured around eight core domains that comprise the Common Body of Knowledge (CBK). As of the most recent updates in 2024 and 2025, the exam places a heavy emphasis on risk management and the overall lifecycle of security operations.