The (ISC)² CBK

A CBK – sometimes simply called a Body of Knowledge – refers to a peer-developed compendium of what a competent professional in their respective field must know, including the skills, techniques and practices that are routinely employed.¹

The (ISC)² CBK is a collection of topics relevant to cybersecurity professionals around the world. It establishes a common framework of information security terms and principles which enables cybersecurity and IT/ICT professionals worldwide to discuss, debate and resolve matters pertaining to the profession with a common understanding, taxonomy and lexicon.

(ISC)² was established, in part, to aggregate, standardize and maintain the (ISC)² CBK for security professionals worldwide. Domains from the (ISC)² credentials are drawn from various topics within the (ISC)² CBK, which are used to assess a candidate's level of mastery of the most critical aspects of information security.

The (ISC)² CBK is updated by the (ISC)² CBK Committee to reflect the most current and relevant topics required to practice the profession.

¹Becker, R.E., Montgomery, L.E.: A profession defined: Association management’s body of knowledge. Association Management 47, 221 (1995).