EC-Council Chief Information Security Officer (CCISO) Training

The CCISO program does not end at the technical features required, but increases to executive management and financial management, both of which are essential to leading a healthy information security program. It concentrates on the application of technical knowledge rather than technical information, which is related to a chief information security officer’s daily tasks. Information security administrators can rise through the professional ranks but must learn executive-level management, strategic planning, financial management, and organizational abilities to reach a C-Level position.

• Network security management
• Network security policies and procedures
• Windows and Linux security administration
• Mobile and IoT device security
• Data security techniques
• Virtualization technology security
• Cloud and wireless security
• Risk assessment tools
• Basics of first response and forensics
• Indicators of Compromise, Attack, and Exposures (IoC, IoA, IoE)
• Threat intelligence capabilities
• Log management
• Endpoint security
• Firewall solutions
• IDS/IPS technologies
• Network Authentication, Authorization, Accounting (AAA)

• 1. Governance and Risk Management
  • Define, Implement, Manage, and Maintain an Information Security Governance Program
  • Information Security Drivers
  • Establishing an information security management structure
  • Laws/Regulations/Standards as drivers of Organizational Policy/Standards/Procedures
  • Managing an enterprise information security compliance program
  • Introduction to Risk Management
• 2. Information Security Controls, Compliance, and Audit Management
  • Information Security Controls
  • Compliance Management
  • Guidelines, Good and Best Practices
  • Audit Management
• 3. Security Program Management and Operations
  • Program Management
  • Operations Management
• 4. Information Security Core Competencies
  • Access Control
  • Physical Security
  • Network Security
  • Wireless Security
  • Endpoint Protection
  • Application Security
  • Encryption Technologies
  • Virtualization Security
  • Cloud Computing Security
  • Transformative Technologies
• 5. Strategic Planning, Finance, Procurement and Vendor Management
  • Strategic Planning
  • Designing, Developing, and Maintaining an Enterprise Information Security Program
  • Understanding the Enterprise Architecture (EA)
  • Finance
  • Procurement
  • Vendor Management
• 6. EC-Council Exam Review
  • Exam Structure
  • Exam Registration Process
  • Time Management
  • Topics and Concepts

The CCISO is for information security executives trying to be CISOs through improving their skills and learning to align information security programs with business goals and objectives. This program also supports existing CISOs to enhance their technical and management skills, as well as business procedures.

The CCISO certification is not an entry-level program. To qualify for the program and examination, you must have a minimum of 5 years of prior experience in at least three of the five domains.