The CISSP curriculum covers subject matter in a variety of Information Security topics. The CISSP examination is based on what (ISC) ² terms the Common Body of Knowledge (or CBK). According to (ISC) ², "the CISSP CBK is a taxonomy - a collection of topics relevant to information security professionals around the world. The CISSP CBK establishes a common framework of information security terms and principles that allow information security professionals worldwide to discuss, debate and resolve matters pertaining to the profession with a common understanding. "[8]

Currently, the CISSP certification covers the following ten domains:

Access control

Telecommunications and network security

Information security governance and risk management

Software development security

Cryptography

Security architecture and design

Operations security

Business continuity and disaster recovery planning

Legal, regulations, investigations and compliance

Physical (environmental) security

(ISC) ² is now releasing the Third Edition Official Guide to the CISSP CBK one domain at a time on iTunes and for the Kindle.