New outlines, version changes, fees and rules from the bodies behind the certifications we cover, written up for candidates with the source behind every point.
From November 3, 2026, the CISM exam follows a new Exam Content Outline. The domain weights become 18, 20, 33 and 29 percent. ISACA adds enterprise architecture and information security architecture and puts more emphasis on security strategy and program development. Exams taken through November 2 follow the 2022 outline. The detailed topic list for the new outline is not yet published.
CompTIA has posted version 2.0 of the SY0-801 exam objectives. The five domains stay, but the weights shift and one objective is devoted to threats from AI usage. The format stays at up to 90 questions in 90 minutes with a passing score of 750. SY0-701 remains available until June 11, 2027 in English and August 13, 2027 in other languages.
The IIA's Third-Party Topical Requirement took effect on September 15, 2026. Scored CIA questions on a new Topical Requirement appear at least six months after its effective date, so not before March 15, 2027. The IIA's CIA exam reference list says testing starts in March 2027. The CIA syllabus itself has not changed. The Cybersecurity Topical Requirement is already in scope.
ISC2's updated AI exam guidance covers all nine of its certification exams and adds a detailed section on Certified in Cybersecurity. For CISSP, the guide is based on the outline effective April 15, 2024. It places AI security tasks in all eight domains, from AI supply chain risk to agent identities and AI-assisted coding. It does not introduce a new CISSP outline.
The IIA lists Vietnamese as a CIA exam language from August 28, 2026. Arabic stays on the 2019 syllabus through December 27, 2026 and moves to the 2025 syllabus on December 28, 2026. Simplified Chinese, offered only in mainland China, moves during the December test window. Candidates in those languages should check which syllabus their test date falls under.
Since July 9, 2026, every PMP exam uses the 2026 Examination Content Outline. Domain weights are now People 33%, Process 41% and Business Environment 26%. The exam keeps 180 questions in 240 minutes with two 10-minute breaks, and the scoring method is unchanged. New rules for live training hours start on December 1, 2026.