CCISO (Certified Chief Information Security Officer)
CCISO is EC-Council's executive-level certification in information security management, developed by sitting CISOs for current and aspiring CISOs. The exam covers governance, risk, compliance and audit management, executive leadership, security controls and program management, core security competencies, and strategic planning, finance, procurement and third-party management. CCISO v4, released in February 2026, adds AI risk topics for security leaders.
Updated
Exam Details
- Issuer
- EC-Council
- Level
- Advanced
- Exam type
- Multiple choice
- Questions
- 150
- Duration
- 2.5 hours
- Passing score
- 60% to 85%, depending on the exam form
- Exam fee
- $999
- Validity
- 3 years
- Tracks
- GRC and Audit
Proctored exam delivered at EC-Council test centers, with several exam forms drawn from different question banks.
EC-Council lists the CCISO exam voucher at $999, sold after the eligibility application is approved. Candidates without EC-Council authorized training also pay a $100 non-refundable application fee. These costs do not apply to students who purchased training packages.
Requirements and Renewal
Prerequisites
Without EC-Council authorized training, five years of experience in each of the five CCISO domains (the years can overlap) and an approved eligibility application. With authorized training, five years of experience in three of the five domains. Candidates with two years of experience in at least one domain, or a CISSP, CISM or CISA, qualify for the Associate CCISO program instead.
Renewal
EC-Council Continuing Education (ECE): 120 credits per certification within each three-year cycle and an annual continuing education fee of $100 for CCISO. Members who miss the requirements are suspended and have 12 months to comply before revocation.
Current Version
CCISO v4, exam blueprint v3, in effect since February 10, 2026.
Exam Domains
5 domains| Domain | Weight |
|---|---|
| Governance, Risk, Compliance, and Audit Management | 15% |
| Organizational Executive Leadership | 16% |
| Information Security Controls, Security Program Management & Operations | 12% |
| Information Security Core Competencies | 46% |
| Strategic Planning, Finance, Procurement, and Third-Party Management | 11% |
DoD 8140 Work Roles
10 work rolesThe DoD 8140 Qualification Matrix V2.1 lists CCISO as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Frequently Asked Questions
What does CCISO stand for?→
CCISO stands for Certified Chief Information Security Officer, an EC-Council certification for information security executives. The current release is CCISO v4.
How much does the CCISO exam cost?→
Once the eligibility application is approved, the exam voucher costs $999. Candidates without authorized training also pay a $100 application fee, and neither cost applies to students who purchased training packages.
How many questions are on the CCISO exam?→
The CCISO exam has 150 multiple-choice questions in 2.5 hours. The cut score ranges from 60% to 85% depending on the exam form.
What is the Associate CCISO?→
Candidates who lack five years of experience in three CCISO domains but have two years in at least one domain, or hold a CISSP, CISM or CISA, can take the Associate CCISO exam after CCISO training. Associates can reapply for CCISO and buy the exam voucher at 50% off once they have the required experience.
Sources
- EC-Council: Certified Chief Information Security Officer (CCISO)
- EC-Council: Chief Information Security Officer exam information
- EC-Council: CCISO Blueprint v3 (PDF)
- EC-Council: CCISO Candidate Handbook v6.1 (PDF)
- EC-Council: Application Process and Eligibility
- EC-Council: ECE Policy
- EC-Council: Continuing Education Fees
- EC-Council: Certified CISO v4 launch announcement
Exam details are checked against official EC-Council pages. Fees, exam versions, and renewal rules change; confirm with EC-Council before registering. CCISO is a trademark of its owner. This site is not affiliated with or endorsed by EC-Council.