CISM Prep Materials Drop Today, Security+ SY0-801 Timing Answers, and Why AI Skills Are Now Non-Negotiable

September 11, 2026 — A busy day for certification news: ISACA's updated CISM prep materials just became available, the Security+ SY0-801 launch window is getting clearer, and new hiring data shows what employers actually want in 2026.

News ISACA's updated CISM Review Manual and question bank are available today. ISACA's revised CISM Exam Content Outline takes effect November 3, 2026 — but the updated prep materials (the new Review Manual and the refreshed QAE question database) go on sale today, September 11. The revised exam adds Enterprise Architecture and Information Security Architecture as explicit content areas and places greater emphasis on information security strategy and program development, reflecting what real security management roles look like today. If you're mid-prep and planning to sit before November 2, your existing materials are still valid. If you're starting fresh, the new materials are the right ones to buy. (Sources: Vinsys — CISM 2026 Exam Update, DailyDebian — CISM Exam Changes November 3) Security+ SY0-801 is targeting a November 17 launch. CompTIA's next version of Security+ has a tentative general availability date of November 17, 2026, with a preview window around October 20. The current SY0-701 exam would retire roughly six months after 801 reaches general availability — putting its retirement somewhere around mid-2027. Key point: certifications earned on SY0-701 remain valid for three years from your test date, regardless of when 701 retires. (Sources: Training Camp — Security+ SY0-801 Release Date, SecuSpark — Security+ SY0-801) AI skills are now listed as required in more than 64% of cybersecurity job postings. Hiring data for 2026 shows AI, machine learning, and automation skills appearing in the majority of cybersecurity job listings — not as a bonus, but as a listed requirement. Cloud security architects, DevSecOps engineers, and IAM specialists remain the hardest-to-fill roles. (Source: Spectraforce — Cybersecurity Hiring Trends 2026) CISSP experience waiver list shrank significantly in April. If you were counting on a certification like CEH, CISA, CRISC, or OSCP to satisfy the CISSP experience waiver, that changed in April 2026 — ISC2 cut its waiver list from approximately 50 credentials down to 25. If you're on a CISSP path, verify that any certifications you hold are still on the current waiver list before assuming they count. (Source: Training Camp — ISC2 Cuts CISSP Experience Waiver List) Global cybersecurity role shortfall remains 3.1–3.5 million unfilled positions. Despite growth in the workforce to over 5.9 million professionals, the demand gap persists at a massive scale. Financial services, healthcare, and cloud service providers are the top hiring sectors. (Source: DestCert — Cybersecurity Job Demand 2026) Study & Passing Tips

On the Security+ timing question — don't let version uncertainty stall you. A common trap is waiting for the next exam version before starting. In practice, SY0-701 is still valid, the 801 outline hasn't been finalized publicly, and a cert earned today is valid for three years regardless. If you're ready now, sit now. The only time waiting makes sense is if you're weeks away from a firm launch date and your study materials already reflect the new content.

Use the CISM transition window strategically. If you're pursuing CISM, you now have a clear decision point: sit before November 2 on the current outline, or start fresh on the updated outline with the new materials. Neither is inherently better — the new version may actually be easier to study for once the updated official resources are available, since the content reflects current job realities. What matters is committing to a path rather than staying in limbo.

Build AI literacy into your study plan, not just your resume. Given that AI knowledge appears in 64%+ of cybersecurity job postings, it's worth connecting your cert studies to AI/ML security concepts. CompTIA's SecurityX (CASP+) and ISC2's CCSP both address AI-adjacent topics like automated threat detection, cloud AI pipelines, and governance. As you study, ask yourself: "How would this concept apply to an AI-enabled environment?" That habit builds the kind of applied thinking employers are looking for in 2026.

For CISM candidates: treat the domain-weight shifts as your study priority list. When a certification refreshes its exam content outline, the domain weights tell you directly where to focus. The new CISM outline puts heavier emphasis on strategy and enterprise architecture — meaning scenario-based questions will skew toward those areas. Identify the new or reweighted domains first and plan your study hours proportionately.

How Test Prep Lite Can Help

Whether you're navigating a mid-stream outline change on CISM, deciding between SY0-701 and 801 on Security+, or building toward CISSP or CASP+, the most efficient use of your prep time is targeted practice by domain — not reading everything and hoping it sticks. Test Prep Lite organizes practice questions by domain and tracks your scores over time, so you can see exactly where you're strong and where you need more repetitions. Check it out at https://app.testpreplite.com

Also Worth Knowing

If you're pursuing CISM and want to sit on the current outline before November 2, check ISACA's testing center availability now — seats in popular areas can fill up within a few weeks of a known deadline. The ISACA exam scheduling page is the most reliable source for current availability.