About the CCISO Program
The Certified CISO (CCISO) Program has certified leading information security professionals around the world.
A core group of high-level information security executives, the CCISO Advisory Board, contributed to developing the program by:
- Forming the foundation of the exam, body of knowledge, and training
- Writing exam questions
- Providing quality assurance checks
- Acting as trainers
Each segment of the program was created with the aspiring CISO in mind, transferring the knowledge of seasoned professionals to the next generation in areas critical to building and maintaining a successful information security program.
The CCISO is the first-of-its-kind training and certification program focused on producing top-level information security executives. It emphasizes the application of information security management principles from an executive management perspective rather than purely technical skills. The program was developed by sitting CISOs for current and aspiring CISOs.
Eligibility
To sit for the CCISO exam and earn the certification, candidates must meet the basic requirements.
- Candidates with 5 years of experience in at least 3 of the C|CISO domains may apply directly.
- Candidates with 2 years of experience in at least 1 domain, or who currently hold a CISSP, CISM, or CISA, may apply for the Associate C|CISO program.
The Role of a Certified CISO
The Chief Information Security Officer (CISO) is an executive leader responsible for:
- Developing and maintaining strong information security strategies
- Addressing emerging threats to digital assets
- Leading teams of skilled professionals to defend organizational interests
CISOs combine technical knowledge with leadership, communication, and strategic skills to ensure resilience against evolving cyber threats.
The CISO of tomorrow will be central in designing effective security processes and guiding organizations through complex challenges.
Why Become a CISO?
Today’s organizations rely on advanced databases and networks to share information with stakeholders daily. However, recent cyber-attacks and incidents prove digital data is easily compromised.
This growing challenge has created strong demand for professionals with executive-level information security skills.
- If you aspire to achieve the highest title in information security
- If you are already serving as a CISO
- Or if you are fulfilling the role without the official title
…the CCISO designation is the recognition of your expertise and achievements.
Achieving CCISO Certification will:
- Differentiate you from other senior security professionals
- Provide employers with assurance of your ability to plan and oversee corporate-wide information security
Certification Target Audience
CCISO certification validates knowledge and experience in the following domains:
- Governance, Risk, and Compliance
- Information Security Controls and Audit Management
- Security Program Management & Operations
- Information Security Core Competencies
- Strategic Planning, Finance, Procurement, and Third-Party Management
CCISO Exam Details
- Duration: 2.5 hours
- Questions: 150
- Format: Multiple exam forms (different question banks)
- Passing Score: Varies by form (60% – 85%)
Age Requirements and Policies Concerning Minors
- Minors may take the exam only with:
- A written consent/indemnity letter signed by a parent or legal guardian
- A supporting letter from a nationally accredited institution of learning
- Adult/minor status is determined by the candidate’s country of residence/origin.
- For clarification or submissions, contact: certmanager@eccouncil.org
Disclaimer
- EC-Council reserves the right to impose additional restrictions to comply with policy.
- EC-Council reserves the right to modify certification policies without notice.
- EC-Council reserves the right to revoke certification in case of non-compliance.





















