What has changed in CyBOK v1.2.0
CyBOK, the Cyber Security Body of Knowledge, has been updated from v1.1 to v1.2.0. The formal release is dated 22 September 2026. This revision updates the areas covering software security and the software development lifecycle. We look at the changes and consider how they could inform the education, training and AI-assisted learning that Cyber Hiroshima is working towards.
Two Knowledge Areas at the centre of the update
The official release information identifies revisions to Software Security and Secure Software Lifecycle. Software Security updates definitions, vulnerability classifications and examples, and explanations of mitigation techniques. Secure Software Lifecycle covers NIST recommendations, agile development, software supply chain security, AI code generation and AI-native development, and regulations. Other areas also receive improvements to formatting, cross-references and bibliographies.
Distinguishing the overall edition from individual versions
The formal version of CyBOK as a whole is v1.2.0, while the included Software Security Knowledge Area is v1.1.0 and Secure Software Lifecycle is v2.0.0. When displaying versions in learning materials or AI answers, recording the Knowledge Area and its individual version alongside the overall edition makes the basis of an explanation easier to trace. This distinction also helps when reading older materials.
Extending preparation into software development
Alongside recovery after an attack and responses to data breaches, we would like learning to cover how services are built, changed and operated. Can a team identify its dependencies on external libraries? Is responsibility for updates clear? Who reviews AI-generated code, and on what basis? These are educational suggestions made in this article in response to the revision. CyBOK does not determine the cause of an attack on a particular organisation or guarantee the effectiveness of its defences.
Checking the evidence behind AI learning assistants
For Cyber Hiroshima’s Cybersecurity AI business, an updated knowledge base provides an opportunity to review the evidence supporting learning. Priorities to consider include distinguishing old and new sources during retrieval, showing the referenced Knowledge Area and version in answers, and preparing questions that check understanding of revised content. Changing a version label on a public page does not automatically update translations, teaching materials or retrieval data. A practical starting point is to compare the content and terminology in the two revised areas, then check answer accuracy and whether each answer matches its cited source.
Connecting knowledge with decisions in exercises
A cyber range or tabletop exercise could present a fictional service with a problem in a dependent library. Participants would investigate the impact, test an update, and explain their functional checks and conditions for resuming operation. A task involving AI-generated code could also prompt reflection on input handling, authentication and dependencies, as well as whether the code works. These are proposals for future exercise design using environments such as SudoRange. They do not describe features already available or results from an existing deployment.
Comparing the revised areas with current learning materials
Learners can start by reading the official changelog and the two Knowledge Areas, then identifying one difference from what they are currently studying. Educators can consider where that difference belongs in their materials, questions or exercises. For Cyber Hiroshima, it is also important to review source labels on related pages, Japanese and English terminology, and the evidence used in teaching materials and AI support. Helping learners use the revised knowledge in their decisions is the next step in making the update useful.
Next to read
How to Learn Cybersecurity Systematically Using CyBOK as a Map
How AI Could Change Cybersecurity Learning
References
CyBOK Version 1.2.0 22 September 2026 — Changelog and Preface
Secure Software Lifecycle v2.0.0
CyBOK Attribution
CyBOK Version 1.2.0 © Crown Copyright, The National Cyber Security Centre 2026, licensed under the Open Government Licence: http://www.nationalarchives.gov.uk/doc/open-government-licence/.