The new exam has been updated to better reflect today’s best practices for risk management and risk mitigation including the following: More emphasis on the practical and hands-on ability to both identify and address security threats, attacks and vulnerabilities.