Introduction

In January 2026 (Reiwa 8), the IPA (Information-technology Promotion Agency, Japan) revised the IT Passport Exam syllabus to Ver.6.5. Coming just nine months after the previous Ver.6.4 (April 2025 / Reiwa 7), the update reflects how quickly the IT field is changing.

"What actually changed in the new syllabus?" "Which terms should I focus on?" — these are questions every exam candidate wonders about. To answer them, in this article I drew on my own term-dictionary database of 2,651 terms and quantitatively analyzed how the syllabus evolved from Ver.6.3 to 6.5.

The analysis showed that, of the 999 terms currently listed in Syllabus Ver.6.5, 450 were newly added. In this article I list all 450 of these terms by category, with a link to a detailed explanation page for each one.

How the syllabus has evolved

The IT Passport Exam syllabus is revised periodically in step with technology trends and changes in society. Here I summarize the changes across the three most recent versions.

Version Revision date Main changes
Ver.6.3 December 2023 (Reiwa 5) Additions, review and reorganization of example terms (baseline)
Ver.6.4 April 2025 (Reiwa 7) Review of information-literacy and legal-reform-related terms
Ver.6.5 January 2026 (Reiwa 8) Major reinforcement of AI, security and basic theory

Looking at changes at the level of example terms, the move from Ver.6.3 to Ver.6.4 was relatively small — just 2 terms added and 1 reorganized. From Ver.6.4 to Ver.6.5, by contrast, 163 terms were newly made explicit and 172 were consolidated or reorganized, a major revision.

In the term-dictionary database, 999 of all 2,651 terms are listed in the current Ver.6.5 syllabus. The remaining 1,652 are terms that were in scope in older versions but have since dropped out, or terms included as related background knowledge.

An overview of the Ver.6.5 new terms

In this article, "new terms" means the 450 terms that, in the term-dictionary database, were not listed in earlier versions of the syllabus but are included in the current Ver.6.5.

2,651 Total terms in database
999 Listed in v6.5
758 New terms
450 New terms
listed in v6.5

Breakdown by major category (450 new terms)

Major categoryNew termsShare
Strategy207 terms46.0%
Management39 terms8.7%
Technology204 terms45.3%

Top 10 mid-categories

RankMid-categoryNew terms
1Corporate activities77 terms
2Security59 terms
3Business industry50 terms
4Legal affairs28 terms
5Information media28 terms
6Network27 terms
7Business strategy management20 terms
8Computer components18 terms
9Information design18 terms
10Service management16 terms

Strategy and Technology are almost equal in size, and together account for more than 90% of the total. Among the mid-categories, Corporate activities (77 terms), Security (59 terms) and Business industry (50 terms) lead the list — a revision that reflects the growing importance of AI utilization and cybersecurity.

New terms by category (450 terms)

Below is a list of the 450 new terms in Syllabus Ver.6.5, organized by major and mid-category. Click a term name to go to its detailed explanation page.

Strategy (207 terms)

System planning (3 terms)

Terms related to system-planning and requirements definition have been added.

System strategy (15 terms)

Terms related to information-systems strategy and business improvement have been added.

Business industry (50 terms)

Terms on AI ethics, engineering, e-commerce and IoT have been added.

Corporate affairs and legal affairs (1 term)

Corporate activities (77 terms)

Many terms on data-analysis methods, AI utilization and the fundamentals of business management have been added.

Primary data Secondary data Dual-axis chart CDP GIS GX (Green Transformation) HR Tech MVV Off-JT e-learning Account aggregation Questionnaire (survey) Invoice system (qualified invoice retention method) (インボイス制度) In-house company system Carbon footprint Government Cloud Cross-section data Cross-tabulation table Grouping Concept map Shapefile Signifier Data assimilation in simulation Talent management Chartjunk Basic Act on the Formation of a Digital Society (デジタル社会形成基本法) Data-driven society Pattern discovery Purpose-driven management Brainwriting Brainstorming Mentoring Mental health Mosaic plot Motivation Reskilling Logic tree Credit management Human behavior log data Human capital management Personal identification code Co-occurring keywords Internal Growth Rate (IGR) Contingency table National Strategic Special Zones Act (国家戦略特別区域法) Variable cost ratio Basic Act on the Advancement of Public and Private Sector Data Utilization (官民データ活用推進基本法) Experimental data Line chart Spurious correlation Scatter plot matrix Time-series data Least squares method Expected monetary value General meeting of shareholders Bar chart Structured data Machine operation log data Correlation and causation Socially responsible investment Type I error Type II error Box-and-whisker plot Precision and bias Tree (systematic) diagram Management philosophy Management objectives Statistical bias Composite chart Affinity diagram method Cognitive bias Survey data Finance, asset, HR and information management Qualitative data Quantitative data Hierarchical organization Unstructured data

Technology strategy management (8 terms)

Terms on planning and managing technology strategy have been added.

New technologies (1 term)

Legal affairs (28 terms)

Terms have been added and updated in line with legal reforms — for example the renaming of the Subcontract Act and the addition of the GX Promotion Act.

Business strategy (4 terms)

Business strategy management (20 terms)

Terms on marketing, management analysis and business strategy have been added.

Management (39 terms)

Service management (16 terms)

Basic terms of ITIL and service management have been added.

System audit (4 terms)

Terms related to auditing and internal control have been added.

System development technology (11 terms)

The set of terms on testing methods, development processes and quality management has been expanded.

Software development management technology (4 terms)

Terms on development processes and agile development have been added.

Project management (2 terms)

PMBOK-based project management knowledge has been strengthened.

Development technology (2 terms)

Technology (204 terms)

Algorithms and programming (13 terms)

Terms on programming fundamentals and data structures have been added.

Computer systems (1 term)

Computer components (18 terms)

Basic hardware terms for processors, memory and the like have been added.

System components (6 terms)

Terms on system configuration and backup have been added.

Security (59 terms)

Many terms on cyberattack methods, security technologies and encryption have been added.

ATT&CK framework DLP ISMAP IoT Security Guidelines MITB (Man-in-the-browser) attack SIEM Access rights Access management Interlock Client certificate Clickjacking Cryptojacking Cross-site scripting countermeasures Cross-site request forgery Computer Unauthorized Access Reporting System (コンピュータ不正アクセス届出制度) Callback Cyber Rescue Team (サイバーレスキュー隊) Spoofing Security cable Reporting System for Software Vulnerability-Related Information (ソフトウェア等の脆弱性関連情報に関する届出制度) Disk encryption Directory traversal Digital signature Trust anchor Drive-by download Password list attack Passwordless authentication Business email compromise (BEC) Fileless malware File-sharing software File encryption Privacy policy Prompt injection Risk communication Risk-based authentication Root certificate Fraud triangle Information Security Measures Guidelines for SMEs (中小企業の情報セキュリティ対策ガイドライン) Man-in-the-middle attack Double extortion False acceptance rate Entry/exit control Voiceprint authentication Safety management measures Information Security Committee Information Security Management Standards (情報セキュリティ管理基準) Attack preparation (weaponization) Adversarial examples Lock management False rejection rate Surveillance camera Actions on Objectives Endpoint behavior monitoring and response (EDR) Third-party relay (open relay) Retina authentication Iris authentication Digital watermark Vein pattern authentication Facial recognition

Software (3 terms)

Terms on OS, middleware and file management have been added.

Database (3 terms)

Terms on RDB, SQL and data manipulation have been added.

Network (27 terms)

Terms on TCP/IP, protocols and network devices have been substantially added.

Hardware (3 terms)

Basic terms on computers and input/output devices have been added.

Basic theory (13 terms)

Basic terms of discrete mathematics and AI theory have been added.

Information design (18 terms)

Terms on UI/UX and web design have been added.

Information media (28 terms)

Terms on multimedia technology and image/audio processing have been added.

Technical elements (3 terms)

Emerging technology (1 term)

New technologies (8 terms)

A pick of the noteworthy new terms

From among the 450 new terms, here I pick out and explain some representative terms in especially notable trend areas.

AI & machine learning

With the spread of generative AI, AI-related terms have been greatly expanded. Beyond how AI works, you are now expected to understand social and safety aspects too — such as hallucination (erroneous generation) and prompt injection (an attack method).

AI (artificial intelligence)

A general term for technology that has computers perform intelligent information processing like a human.

AIOps

A method or technology that uses AI (artificial intelligence) to automate and streamline IT system operations.

Automation with AI

Using AI's judgment to automate advanced or routine tasks that were previously done by humans.

Contract Guidelines on the Use of AI and Data

A document setting out guidelines and standards in the field of system planning.

Bias from AI-user involvement

Bias in AI's answers caused by the user's instructions (prompts) and feedback.

Security

Terms for attack methods on the rise in recent years, such as fileless malware and password list attacks, have been added. On the defensive side, passwordless authentication and disk encryption are new key terms.

IoT Security Guidelines

A government set of guidelines summarizing the threats and countermeasures specific to developing and using IoT devices.

MITB (Man-in-the-browser) attack

An attack in which malware infecting the browser tampers with the user's input just before it is transmitted.

Security cable

A wire that fixes a laptop or peripheral to a desk to prevent physical removal or theft.

Reporting System for Software Vulnerability-Related Information

A system for reporting security flaws (vulnerabilities) in software to the IPA when they are discovered.

Disk encryption

Technology that encrypts an entire storage device such as an HDD or SSD to prevent data being read if it is stolen.

DX & business transformation

Systems and concepts related to promoting DX have been expanded. Terms at the intersection of business and social systems — such as GX (Green Transformation) and the invoice system — draw attention.

GX Promotion Act

A law that sets out the promotion of GX.

GX (Green Transformation)

A transformation that shifts the economic structure from fossil fuels to one centered on clean energy, raising industrial competitiveness.

Invoice system (qualified invoice retention method)

A system for retaining invoices in a government-designated format in order to receive the consumption-tax "purchase tax credit".

Digital Governance Code

A set of guidelines that company executives should put into practice in order to drive digital transformation (DX).

Digital government

A form of government that uses IT to transform the very way administration works, aiming to improve convenience for citizens and make administration more efficient.

Data utilization

Terms for the types of data that form the basis of data science (primary/secondary data, structured/unstructured data, and so on) and for analysis methods have been added.

Primary data

A classification/format of data with primary characteristics.

Secondary data

A classification/format of data with secondary characteristics.

Contract Guidelines on the Use of AI and Data

A document setting out guidelines and standards in the field of system planning.

Cross-section data

A classification/format of data with cross-sectional characteristics.

Data assimilation in simulation

A method that combines simulation results from a numerical model with actual observation data to improve prediction accuracy.

Emerging technologies

Terms on next-generation technologies such as the metaverse and NFTs are included in the exam scope.

NFT (non-fungible token)

Using such technology, a "forgery-proof certificate of authenticity and ownership" is attached to digital data. A one-of-a-kind, irreplaceable asset.

Metaverse

A three-dimensional virtual space built inside a computer network, where many people can freely act and interact.

Study advice for exam candidates

The new terms added in this syllabus revision are areas likely to be tested in future exams. Here I organize the key points for studying them efficiently.

1. Most of the new terms "haven't appeared yet"

Of the 450 new terms, 430 have no record of ever appearing in a past exam. That is 96% of the total, showing that practicing past questions alone is not enough preparation. It is effective to check the syllabus example terms directly and firmly grasp the meaning of each one.

2. Prioritizing by classification

The term dictionary classifies all 2,651 terms into four levels.

ClassificationTermsStudy priority
★ Most important73 termsStudy first. Core terms that appear frequently on the exam
◆ Important926 termsImportant terms needed to pass. Be sure to master them
▲ Formerly important81 termsTerms that were important in the old syllabus. Cover if you have time
△ Old terms1,571 termsUseful as background knowledge. Low chance of being tested directly

An efficient strategy is to first perfect the 73 ★ most-important terms, then expand to the 926 ◆ important terms.

3. Study strategy by category

Technology is a large area with 204 new terms. Start by correctly understanding the "meaning" of each term. Rather than deep technical understanding, it matters more to grasp how terms and concepts map to each other.

Strategy has 207 new terms. Since it centers on business and DX, linking terms to news and real business cases makes them stick better.

Management has a relatively small 39 terms, but it is efficient to organize them after grasping the basic frameworks of project management and ITIL.

IT Passport study app for Syllabus Ver.6.5

Our study app "Shunsoku Master IT Passport" includes all 2,651 terms analyzed in this article. You can try every feature free for 7 days.

  • Term dictionary: 2,651 terms (including 758 new terms)
  • Past exams: 2,374 text questions from 29 past sittings
    * Questions with figures and tables (491) are planned for a future update
  • Learning stages: 232 stages
  • Calculation problems: 23 topics
Download on Google Play

Summary

In Syllabus Ver.6.5, terms were substantially added centered on three areas: AI and machine learning, information security, and DX (digital transformation). Of the 2,651-term dictionary database, 450 are new terms currently listed in Ver.6.5.

Most of these new terms have not yet appeared in past exams, and they are areas likely to be tested in future. Using the category list in this article, prioritize studying the ★ most-important and ◆ important terms first.