Domain 5 also sees a very limited change in terms of the new exam outline.
2015 Exam Outline | 2018 Exam Outline |
Control physical and logical access to assets
| Control physical and logical access to assets
# No Change |
Manage identification and authentication of people and services
| Manage identification and authentication of people, devices, and services
# No Change |
Integrate Identity as a service (e.g., cloud identity) & Integrate third-party identity services (e.g., on premised) | Integrate identity as a third-party service
# No Change. Combined the two points into one. |
Implement and manage authorization mechanisms
| Implement and manage authorization mechanisms
# Added a new type of access control. |
Prevent or Mitigate access control attacks | #Removed |
Manage the identity and access provisioning lifecycle | Manage the identity and access provisioning lifecycle
# No Change |