Certified Chief Information Security Officer (C|CISO)
Frequently Asked Questions
1. What is the C|CISO Program?
The Certified Chief Information Security Officer program is the first of its kind certification that recognizes an individual's accumulated skills in developing and executing an information security management strategy in alignment with organizational goals. C|CISO equips information security leaders with the most effective toolset to defend organizations from cyber-attacks. To rise to the role of the CISO, strong technical knowledge, and experience is more imperative now than ever before but it must be accompanied by the ability to communicate in business value. C|CISOs understand that their information security decisions often have a direct impact on their organization's operational cost, efficiency, and agility. As organizations introduce new technologies, C|CISOs will develop and communicate a strategy to avoid the potential risks stemming from their implementation to the organization's operations.
2. How do I apply for the C|CISO Exam?
In order to qualify to take the CCISO Exam, applicants must fill out the CCISO Exam Eligibility Application found here. Applications should be emailed to firstname.lastname@example.org. If the applicant is attempting the exam without taking EC-Council Authorized Training, five years of experience in each of the five CCISO Domains is required (experience can be overlapping) and a $100 (USD) application fee is due with the application. If an applicant has purchased EC-Council Authorized Training, there is no application fee due and only five years of experience in three of the five domains is required. For more information, please see http://ciso.eccouncil.org/cciso-certification/.
3. How long does it take to process the C|CISO Exam Eligibility Application?
Application processing time varies due to the fact that part of the process involves reaching out to verifiers indicated by the applicants as able to verify their experience. In order to speed up this process, applicants can assist the application processing team by reaching out to their verifiers to ensure they have received the required forms from EC-Council and understand what is required. Applications from students in EC-Council Authorized Training are prioritized and expedited in order to ensure testing can occur at the time of the class if the student desires.
4. What are the five C|CISO domains?
The five CCISO Domains are:
- Domain 1 - Governance (Policy, Legal, and Compliance)
- Domain 2 - IS Management Controls and Audit Management
- Domain 3 - Management of Projects, Technology, and Operations
- Domain 4 - Information Security Core Concepts
- Domain 5 - Strategic Planning and Finance
5. Five years of experience in three of the five C|CISO domains? Does that mean 25 years of experience is required?
No! In most high-level information security management jobs, each of the 5 CCISO Domains is part of each day. The five years can and usually do overlap.
6. What if I do not have the five years of experience in three of the five C|CISO domains? Does that mean that I can't take the C|CISO training?
No! If you do not meet the minimum requirements for the CCISO Exam, that doesn't mean you can't take training. Anyone can take the CCISO course, but only those who qualify to take the CCISO Exam will be issued an exam voucher. Students who do not have the years required can take the EC-Council Information Security Manager (EISM) exam after CCISO training.
7. What is the EX-Council Information Security Manager (EISM) program?
The EISM program allows students who are not yet qualified to sit for the CCISO exam to take the training course and attain an EC-Council certification. EISMs may apply for the CCISO Exam once they have acquired the years of experience. The eligibility application fee is waived and EISMs will receive a 50% discount from the normal CCISO Exam price.
8. How do I know if C|CISO is for me?
- Aspire to attain the highest regarded title within the information security profession - CISO
- Already serve as an official CISO
- Or perform CISO functions in their organization without the official title
9. I am a HR manager. Why should I hire a C|CISO?
C|CISO will give you assurance that the certified professional possesses the necessary skills to identify factors that pose risk to the successful operation of your organization and develop and implement technical, operational, and procedural safeguards to manage those risk factors. C|CISOs are the leadership force that will protect your organization from unwanted and costly security breaches by designing information security programs and leading a team of information security professionals.
10. What do I need to do to renew my certification?
To renew your certification you must satisfy the Continuing Education requirements and remit a renewal fee of $100.00 (USD).