What the course covers
About this course map
CCISO — Certified Chief Information Security Officer — is EC-Council's executive certification, and it is deliberately not a technical exam. It is aimed at people moving into, or already holding, the top security role in an organisation, and it tests the things that job actually requires: running a security programme, managing risk in business terms, handling budgets and vendors, and speaking to a board. It is one of the few security certifications that treats leadership, not tooling, as the subject.
This preparation programme is written for senior practitioners making the step up — security managers, architects and consultants who can already do the technical work and now need the governance, finance and strategy vocabulary that the CISO chair demands. The teaching is built around the five CCISO domains and the real decisions each one covers.
The exam tests scenario judgement across the five domains, not recall of technical facts.
Domain 01 — Governance, risk and compliance
Setting the frame the whole security programme operates inside.
Domain 02 — Information security controls, compliance and audit management
Choosing and running the controls, and standing up to scrutiny.
Domain 03 — Security programme management and operations
The day-to-day of running the function.
Domain 04 — Information security core competencies
The technical breadth a CISO must be able to direct, if not perform.
Domain 05 — Strategic planning, finance, procurement and vendor management
The business machinery of the role, and the part most technical people have never been taught.
Exam & certification
- 1Train with us40 hours of instructor-led preparation, labs and practice questions.
- 2Sit the official examExam voucher sold separately. We buy it from the certification body on your behalf and send you the code — you book your own exam date.
- 3Get certifiedThe certification is awarded by EC-Council when you pass their exam.
What you receive
- EC-Council certification — issued by EC-Council after you pass, and verifiable with them.
- Hacky Security certificate of completion — for the training itself, with a unique ID.
- Checkable by employers — anyone can confirm our certificate on the Verify page.
This course is Hacky Security’s own preparation training. The certification itself is awarded by EC-Council, not by us.
Similar courses
Hacky Security is a EC-Council Accredited Training Center. This course is delivered from Hacky Security's own curriculum; the certification itself is awarded by EC-Council. Certification names and codes are the trademarks of their respective owners and are used only to describe what this course prepares you for.


