CCISO – Certified Chief Information Security Officer (CCISO)

Module 1: Governance – Policy, Legal and Compliance

Module 2: Information Security (IS) Management Controls and Auditing Management

• IS Management Controls
• Auditing Management

Module 3: Managing Projects and Operations

Module 4: Information Security Fundamental Competencies

• Access Control
• Social Engineering, Phishing Attacks and Identity Theft
• Physical Security
• Risk Management
• Disaster Recovery and Business Continuity Planning
• Firewall, IDS/IPS and Network Defense Systems
• Wireless Security
• Virus, Trojans and Malware Threats
• Secure Coding Best Practices and Securing Web Applications
• Operating System Hardening
• Encryption Technologies
• Penetration Testing and Vulnerability Assessment
• Incident Response and Computer Forensics

Module 5: Strategic Planning and Finance

• Strategic Planning
• Finance

CCISO Exam

Details:

• Scope – This exam measures all of the five domains of the Certified Chief Information Security Officer.
• Format – Multiple Choice
• Length – 4 Hours
• Number of Questions – 250
• Passing Score – 70% or Higher

Objectives:

Domain 1 – Governance (25%) – 63 questions

• Information Program Security Management
• Information Security Governance Program
• Regulatory and Legal Compliance
• Risk Management

Domain 2 – IS Risk Controls and Auditing Management (25%) – 62 questions

• Designing, Deploying and Managing Security Controls
• Security Control Types and Objectives
• Implementing Control Assurance Frameworks
• Auditing Management

Domain 3 – IS Leadership with Projects and Operations (20%) – 50 questions

• CISO Role and Responsibilities
• Projects in Information Security

Domain 4 – IS Essential Core Competencies (15%) – 38 questions

• Access Controls
• Physical Security
• Planning for Disaster Recovery and Business Continuity
• Network Security
• Managing Threats and Vulnerabilities
• Application Security
• System Security
• Encryption Technologies
• Penetration Testing
• Vulnerability Assessments
• Computer Forensics
• Incident Response

Domain 5 – Strategic Planning and Finance (15%) – 38 questions

• Planning Security Strategies
• Financial Plans