Governance and Risk Management

• Define, Implement, Manage, and Maintain an Information Security Governance Program
• Information Security Drivers
• Establishing an information security management structure
• Laws/Regulations/Standards as drivers of Organizational Policy/Standards/Procedures
• Managing an enterprise information security compliance program
• Introduction to Risk Management

Information Security Controls, Compliance, and Audit Management

• Information Security Controls
• Compliance Management
• Guidelines, Good and Best Practices
• Audit Management

Security Program Management & Operations

• Program Management
• Operations Management

Information Security Core Competencies

• Access Control
• Physical Security
• Network Security
• Wireless Secuirty
• Endpoint Protection
• Application Security
• Encryption Technologies
• Virtualization Security
• Cloud Computing Security
• Transformative Technologies

Strategic Planning, Finance, Procurement and Vendor Management

• Strategic Planning
• Designing, Developing, and Maintaining an Enterprise Information Security Program
• Understanding the Enterprise Architecture (EA)
• Finance
• Procurement
• Vendor Management

What is the CCISO?

The CCISO is for information security executives trying to be CISOs through improving their skills and learning to align information security programs with business goals and objectives. This program also supports existing CISOs to enhance their technical and management skills, as well as business procedures.

What makes the CCISO different from other certifications?

The CCISO program does not end at the technical features required, but increases to executive management and financial management, both of which are essential to leading a healthy information security program. It concentrates on the application of technical knowledge rather than technical information, which is related to a chief information security officer’s daily tasks. Information security administrators can rise through the professional ranks but must learn executive-level management, strategic planning, financial management, and organizational abilities to reach a C-Level position.

How do I know if CCISO is for me?

The CCISO is the right choice for you if you aspire to attain the highest regarded title within the information security profession – CISO, already serve as an official CISO, or Or perform CISO functions in their organization.

How long is the CCISO certification valid?

Your C|CISO certification is valid for a period of one year.

What do I need to do to renew my certification?

To renew your certification you must satisfy the Continuing Education requirements and remit a renewal fee of $100.00 (USD).

The CCISO certification is not an entry-level program. To qualify for the program and examination, you must have a minimum of 5 years of prior experience in at least three of the five domains.

The CCISO aims to bridge the gap between the executive management knowledge that CISOs need and the technical knowledge that many aspiring CISOs have. This can be a crucial gap as a practitioner endeavors to move from mid-management to upper, executive management roles. Much of this is traditionally learned as on the job training, but the CCISO Training Program can be the key to a successful transition to the highest ranks of information security management. The Certified Chief Information Security Officer certification is also an approved baseline certification on DoD Directive 8570/ 8140.

Exam:

Certified Chief Information Security Officer (CCISO v3)

Duration:

150 minutes

Questions:

150 multiple-choice questions

Passing Grade

To ensure each exam has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 85%.

The CCISO Certification is an industry-leading program that recognizes the real-world experience necessary to succeed at the highest executive levels of information security. Our team can deliver CCISO certification training on-site, anywhere in the world, and can be tailored to fit your organization’s specific needs.

Learn more about our Enterprise Solutions here