De Common Body of Knowledge voor CISSP beslaat 10 domeinen.

- Information Security and Risk Management
- Access Control
- Law, Regulations, Compliance and Investigations
- Physical (Environmental) Security
- Business Continuity and Disaster Recovery Planning
- Security Architecture and Design
- Cryptography
- Telecommunications and Network Security
- Application Security
- Operations Security
