Cart 0
Ec-council | Learning
Certified Director of Information Security | CCISO Certification
Boost your career with EC-Cuncil's CCISO program. Join the elite and excel in IT security management.
About the Certified Chief Information Officer (CCISO) course
Description
CCISO Certification is a leading safety certification program in industry that recognizes the practical experience needed to succeed at the highest levels of information security. Bringing together all the elements required for a level C position, the CCISO programme combines audit management, governance, information system security controls, human capital management, strategic program development and financial expertise essential to the management of a high-performance information security program. The role of CISO is far too important to be acquired by trial. Management skills at the executive level are not areas that should be learned on the job.
The content of the CCISO programme is based on a thorough understanding of technical subjects and does not devote much time to technical information alone, but rather focuses on the application of technical knowledge in the daily work of an information security framework. The objective of CCISO is to bridge the gap between the executive management knowledge required by CISOs and the technical knowledge of many existing and emerging CISOs. This gap can be crucial when a practitioner attempts to move from middle management to senior management. Much of these skills are traditionally acquired through on-the-job training, but the CCISO training programme can be the key to a successful transition to the highest levels of information security management.
Course outline
Area 1: Governance and risk management –
Define, implement, manage and maintain an information security governance program
- Form of enterprise organisation
- Sector of activity
- Organizational maturity
Information security drivers
Establish an information security management structure
- Organizational structure
- Position of ISOC in the organisational structure
- Executive ISOC
- Non-executive ISOC
Laws, regulations and standards as drivers of policy, standards and procedures
Managing an Information Security Compliance Program
Security policy
- Need for a security policy
- Security policy challenges
Policy content
- Types of policies
- Policy implementation
Reporting structure
Standards and best practices
Leadership and ethics
Code of Ethics EC-Council
Introduction to Risk Management
- Organizational structure
- Position of ISOC in the organisational structure
- Executive ISOC
- Non-executive ISOC
Area 2: Security controls, compliance and audit management +
Area 3: Management and operation of the security programme +
Area 4: Basic skills in information security +
Area 5: Strategic planning, finance, procurement and vendor management +
Demos
Review
Minimum requirements –
- Without prior training: In order to be able to take the CCISO exam without taking any training, candidates must justify 5 years of experience in each of the 5 fields the CCISO, verified via the Application for Eligibility for Examination.
- After training: In order to pass the exam after having completed training, candidates must justify 5 years of experience in 3 of 5 fields the CCISO, verified via the Application for Eligibility for Examination.
Dispenses for CCISO (for self-learning applicants) +
About the Review +
Success score +
Details of the examination +
Roles
- Director, Chief Information Security Officer (CISO), Google Cloud
- Deputy CISO
- VP & Chief Information Security Officer
- Chief Information Security Officer (VP)
- System Dir, Info Sys. Security – CISO
- Chief Privacy Officer
- ASSOCIATE VICE PRESIDENT AND CHIEF INFORMATION SECURITY OFFICER
- Chief Security Officer
- IOC COO
- Assistant Executive Director – Chief Information Security Officer
- CISO Threat Intel
- Chief Technical Officer (CTO)
- Chief Data Officer
- VP, Information Security
- Information Security Officer
- Chief Compliance Officer
- Senior Cyber Security IOC SME
- Regional Chief Information Officer
OhPhish
About OhPhish
OhPhish is a great way for CCISOs to boost their company's safety awareness programs free of charge. It is a simple and user-friendly solution to conduct phishing simulations and online training. Launching phishing simulations is facilitated by pre-existing models and connectors to recognized identity directories (such as Active Directory). The solution not only sends e-mails and personalized campaigns, it also tracks in real time responses and actions (such as links clicks or the opening of attachments), thus providing detailed trends and reports per user, department or other key demographic criteria.
