EC-Council’s Certified Chief Information Security Officer (CCISO) is built for security leaders. It focuses on running a security program as a business function: governance, risk, budgets, strategy and vendor management, as well as the technical controls behind them.
I earned CCISO in 2013. On this page you’ll find what the exam covers, how I’d prepare if I were starting today, a free study plan, and ways to work with me if you want help getting across the line.
Get the free CCISO study plan ยท Book a session
How I passed
What the exam covers
CCISO is organized into five domains:
- Governance, risk and compliance
- Information security controls and audit management
- Security program management and operations
- Information security core competencies
- Strategic planning, finance, procurement and vendor management
Exam format
- 150 multiple-choice questions in two and a half hours
- Requires several years of experience across the CCISO domains, or an approved alternative path
Exam details change. Check the official exam page before you book. Official CCISO page.
Who it’s for
CISOs, aspiring CISOs, security directors and senior managers who want to prove they can lead a security function.
How to prepare
- Treat it as an executive exam. Answers should balance risk, cost and business priorities.
- Spend real time on the finance and procurement domain. Technical people often underestimate it.
- Map each domain to your own experience. It helps both on the exam and on the eligibility application.
- Check the eligibility requirements before you study, so there are no surprises.
Free CCISO study plan
Get my step-by-step CCISO study plan by email: what to study each week, the resources worth your time, and a checklist for the week before the exam. It’s free.
[FORM: email signup for the CCISO study plan. Tag subscribers with “CCISO” so follow-up emails match this exam.]
CCISO course
If you’d rather follow a structured path, my CCISO course walks you through every exam domain with lessons, labs where they apply, and practice questions. You can also browse practice exams and guides in the store.
Book a session
Stuck on a domain, failed once already, or short on time? In a 1:1 session we go through where you are, what’s left, and a plan to get you to exam day. Book a session, or see 1:1 certification coaching. Training a team? Ask about corporate team training.
Verify
I hold the Certified CISO (CCISO) certification from EC-Council. Earned 2013.
What to take next
Related leadership certifications: