After this course you can run information security as a leadership responsibility: you derive a strategy from business goals, bring risk and compliance together, justify budgets, manage suppliers and security operations and talk to senior management in their terms. You also assess what AI and automation mean for your security programme. The course is aimed at you if you already carry responsibility for information security and are moving into a CISO role or want to strengthen your position in it.
What you’ll take away.
- Derive a security strategy from business goals and define governance structures
- Bring risks, compliance requirements and controls together in a GRC approach
- Justify security budgets and manage suppliers
- Lead security operations, the SOC and incident management at executive level
- Assess the opportunities and risks of AI and automation for the security programme
Your training in detail
- Who is it for?
- Experienced security leaders such as heads of security, directors or information security officers who are moving into a CISO role or already hold one.
- Prerequisites
- Several years of experience in information security management. EC-Council runs an eligibility process for the exam; check the current requirements with EC-Council beforehand.
- Format & planning
- Standard length: 4 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Information security governance and strategy
Risk management, compliance and GRC
AI, automation and emerging technologies
Leadership, ethics and executive presence
Financial management and vendor governance
Security operations, the SOC, incident management, and technical and architecture foundations
Privacy, awareness and security culture
For a mid-sized company you develop a twelve-month security strategy with prioritised risks, a justified budget and a one-page decision paper for senior management.
Exams, licences & credentials
The course prepares you for EC-Council's Certified Chief Information Security Officer (C|CISO) certification. EC-Council only admits candidates to the exam through its own eligibility process. The exam and its fee are only included if the offer explicitly confirms this. The certificate is issued by EC-Council. This is not an official EC-Council course unless the offer states otherwise.
Vendor references & review date
Sources checked on 2026-11-10. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
Can I sit the exam without work experience?
Generally not. EC-Council checks experience through its own eligibility process. Confirm the current conditions directly with EC-Council before you register.
Is the course technical?
Only as far as a security leader needs to judge technology and architecture. The focus is on strategy, risk, finance and leadership.
Does EC-Council Certified Chief Information Security Officer (C|CISO): security strategy at executive level include a certificate?
The course prepares you for EC-Council's Certified Chief Information Security Officer (C|CISO) certification. EC-Council only admits candidates to the exam through its own eligibility process. The exam and its fee are only included if the offer explicitly confirms this. The certificate is issued by EC-Council. This is not an official EC-Council course unless the offer states otherwise.