EC-Council Certified CISO

EC-Council Certified CISO (CCISO)

The EC-Council Certified CISO (CCISO) is a professional certification for experienced information security professionals.

Focus

The EC-Council Certified CISO certification focuses on Information security governance, risk management, and compliance.

Exam Duration

The EC-Council Certified CISO exam duration is 4 hours

Num of Question

The exam contains a total of 200 multiple-choice questions

Exam Fee

The exam fee is $995 (eccouncil.org).

Exam Validity

The CCRN-Pediatric certification is valid for The CCISO certification is valid for 3 years.

Prior Certification

• 4-10 years of experience in 2-3 domains such as Information Security Governance, Risk Management, and Compliance or Information Systems (IS) Management and/or Operations

Exam Format

The EC-Council Certified CISO exam is a Multiple-choice questions

Passing Conditions

To pass EC-Council Certified CISO exam, applicants must achieve a minimum score of Passing score of 720/1000

Who Should Take

Information security professionals with at least 4-10 years of experience who are looking to advance their careers in information security governance, risk management, and compliance.

• CISO (Chief Information Security Officer)
• IS Manager
• Risk Management Specialist
• Security Consultant

Prerequisites

4-10 years of experience in 2-3 domains such as IS Management and/or Operations, IS Security, and/or IS Audit, Control, and Security

Or can substitute with certifications:

• Any degree or diploma in computer science, computer engineering; any other degree or diploma with 5-7 years of work experience in IS Management and/or Operations, IS Security, and/or IS Audit, Control, and Security

Certification Process

• Step 1: Create an account with EC-Council
• Step 2: Choose a study group or self-study option and prepare for the exam

Domains with Weights

• Domain 1: Information Security Governance (12% - 16%) (13.5%): Information Security Governance includes risk management, compliance, and business continuity and disaster recovery planning.
• Domain 2: Information Security Management (12% - 16%) (14%): Information Security Management includes IS policy and procedures, incident response and crisis management, business continuity and disaster recovery planning, risk management, and compliance.
• Domain 3: Information Security and Risk Management (30% - 45%) (35.5%): Information Security and Risk Management includes threat and vulnerability assessment, risk analysis, risk mitigation, and risk acceptance.
• Domain 4: Information Systems Acquisition, Development, and Implementation (15% - 25%) (19.5%): Information Systems Acquisition, Development, and Implementation includes information systems development lifecycle, IT project management, information systems acceptance and deployment, and information systems maintenance and support.
• Domain 5: Information Security Program Management and Leadership (20% - 35%) (26.5%): Information Security Program Management and Leadership includes IS program management, IS leadership, managing IS team, IS training and awareness, IS metrics and benchmarks, and IT audit and compliance.