EC-Council Certified Chief Information Security Officer (C-CISO)

Course Overview

1 - Domain 1: Governance & Risk Management (Policy, Legal & Compliance)

• Define, Implement, Manage, and Maintain an Information Security Governance Program
• Information Security Drivers
• Establishing an information security management structure
• Laws/Regulations/Standards as drivers of Organizational Policy/ Standards/ Procedures
• Managing an enterprise information security compliance program
• Risk Management
• Risk mitigation, risk treatment, and acceptable risk
• Risk management frameworks
• NIST
• Other Frameworks and Guidance (ISO 31000, TARA, OCTAVE, FAIR, COBIT, and ITIL)
• Risk management plan implementation
• Ongoing third-party risk management
• Risk management policies and processes

2 - Domain 2: Information Security Controls, Compliance & Audit Management

• Information Security Controls
• Compliance Management
• Guidelines, Good and Best Practices
• Audit Management

3 - Domain 3: Security Program Management and Operations

• Program Management
• Operations Management

4 - Domain 4: Information Security Core Concepts

• Access Controls
• Physical Security
• Network Security
• Endpoint Protection
• Application Security
• Encryption Technologies
• Virtualization Security
• Cloud Computing Security
• Transformative Technologies

5 - Domain 5: Strategic Planning, Finance, Procurement and Vendor Management

• Strategic Planning
• Designing, Developing, and Maintaining an Enterprise Information Security Program
• Understanding the Enterprise Architecture (EA)
• Finance
• Procurement
• Vendor Management

Course Comments

Outlines vary slightly per class date. We have a 4 day format that does not include the exam voucher and a 5 day format that does include the exam voucher