Certified Information Security Officer (CISO)

Certification Overview

Certified Information Security Officer (CISO)

Exam Code: CISO-001

Information Security Officer will be responsible for overseeing information security, cybersecurity and IT risk management programs based on industry-accepted information security and risk management frameworks. 

A CISO is an executive who manages information security in an organization. This role is responsible for ensuring all IT technology and information assets are adequately protected and in line with company goals. The CISO role goes beyond expertise in information security. It relates technology and security needs to the overall vision and business goals of an organization. 

While the daily role varies, skills for this position fall into three distinct areas:

  • Risk and compliance management
  • Technical IT expertise
  • Communication and leadership skills

Exam Information

The exam comprises of 100 Multiple Choice Questions out of which the candidate needs to score 70% (70 out of 100 correct) to pass the exam.

Exams are online and proctored based, using a webcam and a reliable internet connection exams can be taken anywhere and anytime.

The total duration of the exam is 1 hour 30 minutes (90 Minutes).

No external sources of information may be accessed during the exam via ProctorU. Further details of the materials permitted are provided:

  • Identification Proof
  • If a candidate does not pass the exam in the second (2nd) attempt, the candidate must wait for a period of at least fourteen (14) calendar days from the date of their attempt to retake the exam for third (3rd) time or any subsequent time.
  • The exam can be taken any number of times.
  • The validity of the CISO™ Certifiate is for five (5) years, the candidate needs to either retake the exam or can complete the E-Course for CISO™ to accrue the number of continuing education units (CEUs) to renew the Certificate. Renewing the certificate will allow the candidate to retain the professional stature and credentials intact.
  • Certificates must be renewed on or before the expiration date (when they become inactive) to be current.

N/A

N/A

The Certified Information Security Officer (CISO)™ Certification has no pre-requisites (Completion of an E-Course is not mandatory from GAQMBok portal), but we highly recommend doing the E-Course as maximum number of questions are drawn from the E-Course in the actual exam.

Course Outline

Module 1 - Governance (Policy, Legal, and Compliance)

  • Information Security Management Program
  • Defining an Information Security Governance Program
  • Regulatory and Legal Compliance
  • Risk Management

Module 2 - IS Management Controls and Auditing Management

  • Designing, deploying, and managing security controls
  • Understanding security controls types and objectives
  • Implementing control assurance frameworks
  • Understanding the audit management process



Module 3 - Security Program Management & Operations

  • The role of the CISO
  • Information Security Projects
  • Integration of security requirements into other operational processes (change management, version control, disaster recovery, etc.)
  • Domain 4: Information Security Core Concepts

Module 4 - Information Security Core Concepts

  • Access Controls
  • Physical Security
  • Disaster Recovery and Business Continuity Planning
  • Network Security
  • Threat and Vulnerability Management
  • Application Security
  • System Security
  • Encryption
  • Vulnerability Assessments and Penetration Testing
  • Computer Forensics and Incident Response

Module 5 - Strategic Planning, Finance, & Vendor Management

  • Security Strategic Planning
  • Alignment with business goals and risk tolerance
  • Security emerging trends
  • Key Performance Indicators (KPI)
  • Financial Planning
  • Development of business cases for security
  • Analyzing, forecasting, and developing a capital expense budget
  • Analyzing, forecasting, and developing an operating expense budget
  • Return on Investment (ROI) and cost-benefit analysis
  • Vendor management
  • Integrating security requirements into the contractual agreement and procurement process

Target Audience

  • Network Engineers with security specialization
  • Experienced IT Professionals engaged in information security management
  • Those who perform CISO functions, but don’t have an official title
  • All the professionals who aspire to reach top-level position in information security profession.

Registration Process for E-Course and Exam

Premium Package
(E-Book Version)

  • E-Book Included
  • The Package also includes E-Voucher/Access Key for Certification Exam
  • The E-Voucher/Access Key can be used via ProctorU Globally.
  • Includes E-certificate and Digital Badge if you qualify in the exam.
  • Course Duration: 40 Days
  • Price: 180 USD

Exam
Voucher

  • Validity: 180 Days
  • Price: 170 USD
  • Please Read Carefully:

    1) Please Purchase the Second Voucher from our Voucher Store to Schedule the exam via ProctorU.

    2) You will receive an ebook to your E-Mail within 24 hours once you purchase the Exam Voucher.

Visit E-Voucher Store

Exam Registration

  • To Register for an Exam
Click Here