Chief Information Security Officer (CISO) («CISO»)

• Explaining the basic principles and concepts of information security
• Understanding the role and responsibilities of the CISO and the associated ethical considerations
• Managing the challenges associated with this role
• Designing and developing an effective information security program tailored to the needs of the organization
• Adopting applicable frameworks, laws and regulations
• Communicating and implementing policies to ensure information security
• Identifying, analyzing, assessing and managing information security risks using a systematic and effective approach

1 Fundamentals of information security and the role of a CISO

• Objectives and structure of the training
• Fundamentals of information security
• The role of the Chief Information Security Officer (CISO)
• Information security program for risk identification and management

2 Information security, risk management, architecture and design

• Information security compliance program
• Analysis of existing information security capabilities
• Risk management in the area of information security
• Security architecture and design

3 Security measures, incident management and change management

• Information security measures
• Incident management in information security
• Change management

4 Information security awareness, monitoring and measurement as well as continuous improvement

• Information security awareness and training measures
• Monitoring and measurement
• Assurance program
• Continuous improvement

5 Certification brush-up

• Q&A
• Exam tips

The course content is based on the official PECB exam specifications.

Consists of the following modules

• Chief Information Security Officer – Brush-up
• Chief Information Security Officer (CISO)

The course is held in German with English documents.

Practical presentations and best-practice examples illustrate the tasks of the Chief Information Security Officer.

Exchange of experience with experienced CISOs and security experts provides insights into current trends and best practices in the industry.

Exercises based on case studies strengthen practical skills.

Extensive test questions, which are based on the certification requirements, ensure optimal exam preparation.

The training is aimed at:

• Professionals who are actively involved in managing information security or aspire to such a role.
• IT managers who are responsible for overseeing information security programs
• Security professionals who aspire to a leadership role, such as security architects, security analysts and security auditors
• Professionals responsible for managing information security risk and compliance within organizations
• Experienced CISOs who want to expand and document their knowledge
• Executives, including CIOs, CEOs and COOs, who play a critical role in information security decision-making processes

There are no formal requirements for admission to the examination. Knowledge of IT management and information security is recommended.

The «PECB Certified Information Security Officer» exam meets the requirements of the PECB Examination and Certification Program (ECP). It covers the following areas of competence:

• Domain 1: Fundamental concepts of information security
• Domain 2: The role of the Chief Information Security Officer (CISO) in an information security program
• Domain 3: Selecting a security compliance program, risk management, and security architecture and design
• Domain 4: Operational aspects of information security measures, incident management and change management
• Domain 5: Fostering an information security culture: monitor, measure and improve an information security program

The exam is available in English.

Exam format
Online (you will receive an exam voucher from Digicomp), multiple-choice questions, number of questions: 80, duration: 180 minutes, open book.

Exam language & duration
If you choose an examination language that is not your native language, you will receive a time surcharge of 20%.

• Chief Information Security Officer (CISO)