CIPM

What does the CIPM exam cover, on one page?

3 October 2026Credential Press1 min read

The CIPM Body of Knowledge on one page: every domain, how many exam items it carries, and what it covers. The mnemonic at the bottom gives you the domains in order.

What does the CIPM exam cover, on one page?

CIPM Body of Knowledge 4.2.0

I Developing a framework (14 to 18)

Program scope and strategy
Vision and mission
In-scope laws and standards

II Program governance (12 to 16)

Policies and processes
Roles and responsibilities
Privacy metrics
Training and awareness

III Assessing data (12 to 16)

Data governance systems
Processors and vendors
Physical and technical controls
Shared data in mergers

IV Protecting personal data (9 to 13)

Information security practices
Privacy by Design
Data use guidelines

V Sustaining performance (7 to 9)

Performance metrics
Auditing the program
Continuous assessment

VI Requests and incidents (10 to 14)

Access requests and rights
Incident handling
Improving the response plan

Frame Govern Assess Protect Sustain Respond

F Developing a framework
G Program governance
A Assessing data
P Protecting personal data
S Sustaining performance
R Requests and incidents

CIPM mind map

Embed it on your site, wiki or study group page:

<a href="https://credentialpress.com/guides/cipm-mind-map"><img src="https://credentialpress.com/img/mindmaps/cipm.png" alt="CIPM mind map" width="1600" height="1131"></a>

How do you use the mind map?

Print the PDF and pin it where you study, or open the Markdown in Obsidian (a mind map plugin draws it from the headings). Say the mnemonic until you can list the domains in order, then add one item from memory under each branch. The quiz tells you which branch to revisit.

Where next?

Also free: the CIPM interview questions and the CIPM 10-question quiz, plus every other credential on our study tools page. For the full syllabus, the CIPM Exam Guide and the CIPM Practice Questions go domain by domain.

Frequently asked questions

What are the CIPM exam domains?

I Developing a framework (14 to 18); II Program governance (12 to 16); III Assessing data (12 to 16); IV Protecting personal data (9 to 13); V Sustaining performance (7 to 9); VI Requests and incidents (10 to 14).

Is there a mnemonic for the CIPM domains?

Frame Govern Assess Protect Sustain Respond: F for Developing a framework, G for Program governance, A for Assessing data, P for Protecting personal data, S for Sustaining performance, R for Requests and incidents.

Can I use the CIPM mind map in Obsidian?

Yes. Download the Markdown file and open it in Obsidian; a mind map plugin draws it from the headings. A printable PDF and a PNG are free too.