Certified Chief Information Security Officer (CISO) – Unified Certification Exam

Exam code

ITC-200

Launch date

January 29, 2026

Exam description

The Certified Chief Information Security Officer (CISO) Unified Certification Exam validates the candidate’s knowledge of information security governance, risk management, security controls, compliance, incident management, privacy, business continuity, AI management, and cybersecurity, in accordance with internationally recognized standards and frameworks.

Current version

v1 (January 29, 2026)

Exam format

Multiple choice; computer-based; closed book (online proctored exam)

Number of questions

100 questions

Passing score

70% (70 out of 100)

Exam duration

120 minutes

Level

Advanced

Languages

English and Portuguese

Exam description

This exam covers key topics from ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27005, ISO/IEC 27014, ISO/IEC 27035, ISO/IEC 27701, ISO 22301, ISO/IEC 42001, CIS Controls, and the NIST Cybersecurity Framework (CSF 2.0), including information security governance, organizational accountability, risk assessment and treatment, security controls, compliance obligations, incident management, privacy information management, business continuity, AI management, and cybersecurity risk management. It validates your comprehensive knowledge of how to govern, manage, and continuously improve an organization’s information security program, protect information assets, manage security and privacy risks, respond effectively to incidents, support business resilience, and address emerging AI-related risks in accordance with widely used and globally recognized standards and frameworks.

RECOMMENDED HOURS OF STUDY

32 hours

BLOOM'S TAXONOMY

Level 2 (Understanding), Level 3 (Applying), Level 4 (Analyzing), and Level 5 (Evaluating)

Recommended reading

• ISO/IEC 27001:2022 – Information security, cybersecurity and privacy protection — Information security management systems — Requirements
• ISO/IEC 27002:2022 – Information security, cybersecurity and privacy protection — Information security controls
• ISO/IEC 27005:2022 – Information security, cybersecurity and privacy protection — Guidance on managing information security risks
• ISO/IEC 27014:2020 – Information security, cybersecurity and privacy protection — Governance of information security
• ISO/IEC 27035-1:2023 – Information technology — Information security incident management — Part 1: Principles and process
• ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information management systems — Requirements and guidance
• ISO 22301:2019 – Security and resilience — Business continuity management systems — Requirements
• ISO/IEC 42001:2023 – Information technology — Artificial intelligence — Management system
• CIS Controls v8.1
• NIST Cybersecurity Framework (CSF 2.0)

Prerequisites

There are no prerequisites for this certification program.

Recommended experience

Six months of work experience in Information Security

Validity period

Lifetime