CERTIFIED CHIEF INFORMATION SECURITY OFFICER (CCISO)

COURSE DESCRIPTION

EC-Council’s Chief Certified Information Security Officer (C|CISO) Program has empowered information security professionalsto achieve their professional goals across the globe. It is a program developed and delivered by seasoned security executives. It equips future executives with business and technical knowledge so they can succeed at the highest levels of the security industry. The Program is designed by seasoned CISOs to help train professionals in the business of security. The Certified CISO Program is a global community of security leadership focused on delivering security capabilities aligned to the business.

The Certified CISO curriculum provides an executive management perspective that incorporates information security management principles, business acumen, and general technical knowledge within five crucial domains encompassing business functions, strategic security portfolio management, and the latest technology shifts within the security industry.

WHY SHOULD YOU CONSIDER THE C|CISO PROGRAM?

EC-Council’s Certified Chief Information Security Officer (CICISO) Program has certified leading information security professionals around the world. A core group of high-level information security executives, the C|CISO Advisory Board, formed the foundation of the program and outlined the content covered by the exam, body of knowledge, and training. Some members of the Board contributed as authors, others as exam writers, others as quality assurance checks, and still others as instructors. Each segment of the program was developed with the aspiring and sitting CISO in mind and looks to transfer the knowledge of seasoned executives to the next generation of leaders in the areas that are most critical in the development and maintenance of a successful information Security program.

The Certified CISO certification is ANAB-accredited and designed to meet the rigorous ANAB standards. It is also an approved baseline certification under DoD Directive 8570/8140, providing an excellent opportunity for advancement in the U.S. military and is recognized by the U.S. Army, Navy, Air Force, and Marine Corps.

ABOUT THE EXAM

To earn the C|CISO, every applicant must pass the exam covering all 5 C|CISO domains, regardless of experience in each domain. The exam consists of 150 multiple-choice questions administered over a two-and-a-half-hour period. The questions on the exam require extensive thought and evaluation.

There are three cognitive levels tested on the C|CISO exam:

Level 1

Knowledge: This cognitive level of questions is used to recall memorized facts. This is the most basic cognitive level rarely accepted on certifications as it merely recognizes the candidate’s ability to memorize information. It can be effectively used when asking for basic definitions, standards or any concrete fact.

Level 2

Application: This cognitive level of questions is used to identify the candidate’s ability to understand the application of a given concept. It differs from Knowledge based questions in the sense that it requires the understanding and correct applicability of a given concept – not just the concept itself. This type of question often quires additional context before the actual question is provided in the stem.

Level 3

Analysis: This cognitive level of questions is used to identify the candidate’s ability to identify and resolve a problem given a series of variables and context. Analysis questions differ greatly from Application based questions in the sense that they require not only the applicability of a concept but also how a concept, given certain constraints, can be used to solve a problem.

Note: Students opting for the Associate CICISO exam must get tested on only two cognitive levels of the above viz.

Level 1: Knowledge &

Level 2: Application. To learn more about the Associate C|CISO program.

COURSE OUTLINE

Domain 1: Governance, Risk, Compliance

Domain 2: Information Security Controls and Audit Management

Domain 3: Security Program Management & Operations

Domain 4: Information Security Core Competencies

Domain 5: Strategic Planning, Finance, Procurement, and Third-Party Management

ELIGIBILITY

To take the CICISO exam without participating in the training course, candidates must provide proof that they have 5 years of experience in each of the CICISO domains. Candidates who do participate in the C|CISO training program must show 5 years of experience in three of the CICISO domains to take the exam.

Candidates who do not have 5 years of experience in three of the C|CISO domains for the C|CISO training but have 3 years of experience in at least 1 domain (or who currently hold either the CISSP, CISM or CISA certifications) are qualified for the Associate C|CISO program.

Inquire Now