Certified Chief Information Security Officer (CCISO)

EC-Council’s CCISO Program has certified leading information security professionals
around the world. A core group of high-level information security executives, the CCISO
Advisory Board, contribut...

The program focuses on five domains to bring together all the components required for a C-Level position.
It combines governance, security risk management, controls, audit management, security program
management and operations, information-security core concepts, and strategic planning, finance, and
vendor management––skills that are vital to leading a highly successful information security program.


The five domains were mapped in alignment to the NICE Cybersecurity Workforce Framework (NCWF),
a national resource that categorizes and describes cybersecurity work, listing common sets of duties and
skills needed to perform specific tasks.


The framework consists of seven highly important categories; one of which is “Oversight and Development”
and deals with leadership, management, direction, and advocacy. It was upon these requirements that
the CCISO program was created, with skill development courses in legal advice and advocacy, strategic
planning and policy development, Information Systems Security Operations (ISSO), and Security Program
Management (CISO) being 95% related to the NCWF.

In this course, you will learn in-depth content in each of the 5 CCISO Domains:



- Governance, Risk, Compliance
- Information Security Controls and Audit Management
- Security Program Management & Operations
- Information Security Core Competencies
- Strategic Planning, Finance, Procurement, and Third-Party Management



Taken together, these five Domains of the C|CISO program translate to a thoroughly knowledgeable, competent executive information security practitioner.




Exam Informati...

This course is designed for the aspiring or sitting upper-level manager striving to
advance his or her career by learning to apply their existing deep technical knowledge to
business problems.

Domain 1: Gorvenance, Risk and Compliance

Governance




- Define, implement, manage and maintain an information security governance program that includes leadership, organizational structures, and processes.
- Align information security governance framework with organizational goals and governance, i.e., leadership style, philosophy, values, standards, and policies.
- Establish information security management structure.
- Establish a framework for information security governance monitoring...