Chief Information Security Officer

Chief Information Security Officer

EC-Council’s CCISO Program has certified leading information security professionals around the world. A core group of high-level information security executives, the CCISO Advisory Board, contributed by forming the foundation of the program and outlining the content that would be covered by the exam, body of knowledge, and training. Some members of the Board contributed as authors, others as exam writers, others as quality assurance checks, and still others as trainers. Each segment of the program was developed with the aspiring CISO in mind and looks to transfer the knowledge of seasoned professionals to the next generation in the areas that are most critical in the development and maintenance of a successful information security program.

The Certified CISO (CCISO) program is the first of its kind training and certification program aimed at producing top-level information security executives. The CCISO does not focus solely on technical knowledge but on the application of information security management principles from an executive management point of view. The program was developed by sitting CISOs for current and aspiring CISOs.

In order to sit for the CCISO exam and earn the certification, candidates must meet the basic CCISO requirements. Candidates who do not yet meet the CCISO requirements but are interested in information security management can pursue the EC-Council Information Security Management (EISM) certification.

What is the role of a certified Chief Information Security Officer(CISO)?

The CISO position emerged worldwide as a designation of executive leaders who can address the emerging threats to information security by developing and maintaining a tough information security strategy. CISOs – with the experience, leadership, communication skills and innovative strengths are born to resolve the ever-growing information security threats. The CISO of tomorrow will play a vital role in creating effective and efficient processes and will lead a team of technically skilled professionals to defend the core interests of their organization.

Become a Chief Information Security Officer

Today’s world is one of constant and instant information exchange. Organizations, be it private businesses or government bodies, rely on sophisticated computer databases and networks to share digital information on a daily basis with their subsidiaries, branches, partners, clients, employees, and other stakeholders. However, years of information security incidences and the onslaught of the recent cyber-attacks prove that digital data can be easily compromised. Organizations therefore, are increasingly in need of a new set of skills and processes to ensure the security of information at a scale that will be required tomorrow.

If your aspiration is to have the highest regarded title within the information security profession – CISO, if you already have earned the role of a CISO, or if you are currently playing the role of a CISO in your organization without the official title, the CISO designation is the recognition of your knowledge and achievements that will award you with professional acknowledgement and propel your career.

Achieving the CCISO Certification will differentiate you from others in the competitive ranks of senior Information Security Professionals. CCISO will provide your employers with the assurance that as a CCISO executive leader, you possess the proven knowledge and experience to plan and oversee Information Security for the entire corporation.

Certification Target Audience

CCISOs are certified in the knowledge of and experience in the following CISO Domains:

  • Governance (Policy, Legal & Compliance)
  • IS Management Controls and Auditing Management (Projects, Technology & Operations)
  • Management – Projects and Operations
  • Information Security Core Competencies
  • Strategic Planning & Finance

Clause: Age Requirements and Policies Concerning Minors

The age requirement for attending the training or attempting the exam is restricted to any candidate that is at least 18 years old.

If the candidate is under the age of 18, they are not eligible to attend the official training or eligible to attempt the certification exam unless they provide the accredited training center/EC-Council a written consent of their parent/legal guardian and a supporting letter from their institution of higher learning. Only applicants from nationally accredited institution of higher learning shall be considered.

Disclaimer: EC-Council reserves the right to impose additional restriction to comply with the policy. Failure to act in accordance with this clause shall render the authorized training center in violation of their agreement with EC-Council. EC-Council reserves the right to revoke the certification of any person in breach of this requirement.

For More Information Click here...

FREQUENTLY ASKED QUESTIONS

1.What is the CCISO Program?
A.

The Certified Chief Information Security Officer program is the first of its kind certification that recognizes an individual’s accumulated skills in developing and executing an information security management strategy in alignment with organizational goals. C|CISO equips information security leaders with the most effective toolset to defend organizations from cyber-attacks. To rise to the role of the CISO, strong technical knowledge, and experience is more imperative now than ever before but it must be accompanied by the ability to communicate in business value. C|CISOs understand that their information security decisions often have a direct impact on their organization's operational cost, efficiency, and agility. As organizations introduce new technologies, C|CISOs will develop and communicate a strategy to avoid the potential risks stemming from their implementation to the organization's operations.

2. How do I apply for the CCISO Exam?
A.

In order to qualify to take the CCISO Exam, applicants must fill out the CCISO Exam Eligibility Application found here. Applications should be emailed to cciso@eccouncil.org. If the applicant is attempting the exam without taking EC-Council Authorized Training, five years of experience in each of the five CCISO Domains is required (experience can be overlapping) and a $100 application fee is due with the application. If an applicant has purchased EC-Council Authorized Training, there is no application fee due and only five years of experience in three of the five domains is required. For more information, please see http://ciso.eccouncil.org/cciso-certification/.

3. How long does it take to process the CCISO Exam Eligibility Application?
A.

Application processing time varies due to the fact that part of the process involves reaching out to verifiers indicated by the applicants as able to verify their experience. In order to speed up this process, applicants can assist the application processing team by reaching out to their verifiers to ensure they have received the required forms from EC-Council and understand what is required. Applications from students in EC-Council Authorized Training are prioritized and expedited in order to ensure testing can occur at the time of the class if the student desires.

4. What are the five CCISO Domains?
A.

The five CCISO Domains are:

  • Domain 1 - Governance (Policy, Legal, and Compliance)
  • Domain 2 - IS Management Controls and Audit Management
  • Domain 3: Management of Projects, Technology, and Operations
  • Domain 4: Information Security Core Concepts
  • Domain 5: Strategic Planning and Finance
5. Five years of experience is required in each of the five CCISO Domains (self-study). Does that mean 25 years of experience is required?
A.

No! In most high-level information security management jobs, each of the 5 CCISO Domains is part of each day. The five years can and usually do overlap.

6. What if I don’t have five years of experience in three of the five CCISO domains? Does that mean I can’t take the CCISO training?
A.

No! If you do not meet the minimum requirements for the CCISO Exam, that doesn’t mean you can’t take training. Anyone can take the CCISO course, but only those who qualify to take the CCISO Exam will be issued an exam voucher. Students who do not have the years required can take the EC-Council Information Security Manager (EISM) exam after CCISO training.

7. What is the EC-Council Information Security Manager (EISM) program?
A.

The EISM program allows students who are not yet qualified to sit for the CCISO exam to take the training course and attain an EC-Council certification. EISMs may apply for the CCISO Exam once they have acquired the years of experience. The eligibility application fee is waived and EISMs will receive a 50% discount from the normal CCISO Exam price.

8.What are the EC-Council Authorized Training options?
A.

CCISO training is available at:

  • In-person training is available at EC-Council events (www.hackerhalted.com and www.takedowncon.com) and others listed under the training section of this page: http://ciso.eccouncil.org/cciso-certification/.
  • Online via our iClass program. Options for self-paced and live online are available. Click here for more information!
  • In-person training via our Accredited Training Center network! Fill out the form found here to find a training center in your area: http://www.eccouncil.org/Training/training-locator.
9. How do I know if C|CISO is for me?
A.

C|CISO is the right choice for you and your career if you:

  • Aspire to attain the highest regarded title within the information security profession – CISO
  • Already serve as an official CISO
  • Or perform CISO functions in their organization without the official title
10. I am an HR manager. Why should I hire a C|CISO?
A.

C|CISO will give you assurance that the certified professional possesses the necessary skills to identify factors that pose risk to the successful operation of your organization and develop and implement technical, operational, and procedural safeguards to manage those risk factors. C|CISOs are the leadership force that will protect your organization from unwanted and costly security breaches by designing information security programs and leading a team of information security professionals.

11. What do I need to do to renew my certification?
A.

To renew your certification you must satisfy the Continuing Education requirements and remit a renewal fee of $100.00 (USD).

12. I have more questions.
A.

We would love to help! Contact us at cciso@eccouncil.org or +1-505-341-3228 for answers!