EC-Council Certified Chief Information Security Officer (C-CISO)

The CCISO program integrates audit management, governance, IS controls, human resource management, strategic program creation, and the financial knowledge necessary to lead a highly effective information security program, bringing together all the requirements for a C-Level role. The CCISO places an emphasis on the application of information security management principles from an executive management perspective rather than just technical expertise. The program was developed by sitting CISOs for current and aspiring CISOs.

Governance and Risk Management

• Corporate governance principles applied to security

• Regulatory compliance (ISO 27000, ISO 31000, etc.)

• Enterprise security programs and frameworks

• Risk management lifecycle: identification, assessment, treatment, monitoring

Information Security Controls, Compliance, and Audit Management

• Designing and managing information security controls

• Security audits and effectiveness testing

• Compliance program management and audit processes

Security Program Management and Operations

• Developing and managing security policies and procedures

• Security awareness and training programs

• Incident response and forensics

• Managing day-to-day security operations

Information Security Core Competencies

• Cryptography, network security, access controls

• Physical and application security

• Threat and vulnerability management

• Disaster recovery and business continuity planning

Strategic Planning, Finance, Procurement, and Vendor Management

• Strategic security program planning

• Financial management of security programs

• Procurement of security products and services

• Vendor and third-party risk management

The EC-Council Certified Chief Information Security Officer (C-CISO) is designed for individual with knowledge and experience in the following domains:

• Governance, Risk, Compliance
• Information Security Controls and Audit Management
• Security Program Management & Operations
• Information Security Core Competencies
• Strategic Planning, Finance, Procurement, and Third-Party Management

1. Attend EC-Council Certified Chief Information Security Officer (C-CISO)
2. Pass the following exams:

• EC-Council Certified Chief Information Security Officer (C-CISO)