Course Outline
1. Introduction to the CISO Position and Institutional Framework
- Strategic significance of the Chief Information Security Officer role
- Duties, accountabilities, and leadership standards
- Information security governance in alignment with organizational strategy
2. Governance, Risk, and Compliance (GRC)
- Construction of information security governance structures
- Conformity with ISO/IEC 27001, COBIT, and NIST benchmarks
- Regulatory adherence and preparation for audits
3. Information Security Risk Management
- Techniques for identifying, analyzing, and mitigating risks
- Risk management approaches and established frameworks
- Integration of risk assessment into executive decision-making processes
4. Security Program Architecture and Administration
- Formulation and execution of enterprise security strategies
- Creation of security policies, standards, and procedural guidelines
- Performance metrics, reporting mechanisms, and continuous refinement
5. Information Security Controls and Technological Infrastructure
- Overview of contemporary security technologies and system architectures
- Protection of data, identity governance, and cloud security measures
- Implementation of defense-in-depth and zero-trust principles
6. Incident Response, Business Continuity, and Disaster Recovery
- Development and execution of incident response protocols
- Business continuity planning and recovery mechanisms
- Analysis of lessons learned and post-incident evaluation procedures
7. Leadership, Communication, and Strategic Integration
- Cultivation of a security-conscious culture throughout the institution
- Conveyance of risk and strategic directives to executive leadership and the board
- Oversight of cross-functional teams and vendor partnerships
8. PECB Certification Examination Preparation
- Examination structure, format, and review of essential topics
- Illustrative questions and simulated examinations
- Certification procedures and maintenance obligations
Conclusion and Subsequent Actions
- Assessment of core leadership and governance competencies
- Direction for retaining certification and advancing professional development
- Resources for specialized expertise in cybersecurity leadership
PECB Chief Information Security Officer (CISO) Certification Criteria
To obtain the PECB CISO designation, all candidates must successfully complete the formal PECB Chief Information Security Officer examination and execute the PECB Code of Ethics.
Based on professional history and leadership background, candidates may apply for one of two specific credential tiers:
1. Information Security Officer
-
Credential Designation: PECB Certified Information Security Officer
-
Required Professional Experience: None
-
CISO Management System Project Experience: None
-
Appropriate For: Entry-to-mid-level security professionals or managers who have passed the examination but lack the long-term executive record required for the chief title.
2. Chief Information Security Officer
-
Credential Designation: PECB Certified Chief Information Security Officer
-
Required Professional Experience: Five years of general professional experience, including a minimum of two years specifically dedicated to information security.
-
CISO Management System Project Experience: A cumulative total of at least 300 hours of documented project activities.
https://pecb.com/en/education-and-certification-for-individuals/pecb-ciso/ciso
Requirements
- Understanding of information security concepts and frameworks
- Experience in information security or IT governance roles
- Familiarity with ISO/IEC 27001 or related standards is recommended
Target Audience
- Information Security Managers and Senior IT Professionals
- Risk and Compliance Officers
- IT Directors and Consultants
- Professionals aspiring to become Chief Information Security Officers (CISOs)
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
Dana Foster - Corrigan Oil Company
Course - ISO 9001 Foundation
Speed of response and communication