PECB Chief Information Security Officer (CISO) — Live Online Training, Nov–Dec 2026

Lead information security at executive level — PECB CISO Certification

The role of the Chief Information Security Officer has moved from IT function to executive leadership. Organisations now need a designated professional with the skills to oversee and manage all aspects of information security — ensuring robust security measures, effective risk management, and strategies tailored to the organisation’s specific needs.

The PECB Chief Information Security Officer programme equips you with the knowledge, skills, and frameworks to take on that responsibility. Covering security governance, risk management, regulatory compliance, incident management, and security culture, this is the definitive programme for professionals ready to step into or strengthen an executive information security leadership role.

Delivered by Jan Carroll, Ireland’s PECB Authorised Silver Partner and PECB Certified ISO/IEC 27001 Lead Implementer and Lead Auditor, over four live online sessions across November and December 2026. Cohorts are small by design — direct access to Jan throughout all four days.

Course details

• Price €1,999 — includes PECB exam and certification
• Dates Thursday 6 November · Thursday 13 November · Thursday 27 November · Thursday 4 December 2026
• Time 9:30am–5:30pm Irish time (includes a 2-hour break)
• Effective learning time 6 hours per session · 24 hours total
• Note No session on 20 November — gap week between Sessions 3 and 4
• Delivery Live online — link sent on enrolment
• Places Limited cohort — early enrolment recommended
• Credential PECB Certified Chief Information Security Officer
• CPD credits 31 CPD credits on completion
• Accreditation PECB — internationally recognised
• Prerequisites A fundamental understanding of information security principles and concepts is recommended

Who is this course for?

The PECB CISO programme is designed for professionals who are currently in, or moving into, senior information security leadership roles. It is also valuable for executives who hold responsibility for information security decision-making at board or C-suite level.

This course is for:

• Information security professionals ready to step into CISO or Head of Information Security roles
• IT managers responsible for overseeing information security programmes
• Security architects, analysts, and auditors aspiring to senior leadership
• Risk and compliance officers managing information security obligations
• Experienced CISOs refreshing and formalising their knowledge
• CIOs, CEOs, and COOs with responsibility for information security governance
• Professionals pursuing executive-level information security credentials

Prerequisite: a fundamental understanding of information security principles is recommended. Professionals with ISO 27001 Lead Implementer or Lead Auditor certification will find this programme a natural progression.

What you will learn

By the end of the PECB CISO programme you will be able to:

• Explain the fundamental principles and concepts of information security at an executive level
• Understand and fulfil the roles, responsibilities, and ethical obligations of a CISO
• Design and develop an effective information security programme tailored to your organisation’s needs
• Adopt applicable frameworks, laws, and regulations and communicate policies to ensure compliance
• Identify, analyse, evaluate, and treat information security risks using a systematic approach
• Manage security controls, incidents, and organisational change effectively
• Build and sustain an information security culture across the organisation
• Monitor, measure, and continually improve an information security programme

Programme structure — four live days

Session 1 — Thursday 6 November: Fundamentals of information security and the role of a CISO
Core information security concepts and principles. The evolution of the CISO role from IT function to executive leadership. CISO responsibilities, ethical considerations, and leadership challenges. Building the foundation for an effective information security programme.

Session 2 — Thursday 13 November: Compliance, risk management, and security architecture and design
Selecting and implementing an information security compliance programme. Information security risk identification, assessment, and treatment. Security architecture principles and frameworks. Regulatory landscape — NIS2, GDPR, EU AI Act, and sector-specific requirements relevant to Irish organisations.

Session 3 — Thursday 27 November: Security controls, incident management, and change management
Designing and implementing effective security controls. Incident detection, response, and recovery. Managing change in an information security context. Practical application of security frameworks including ISO 27001 and NIST.

Session 4 — Thursday 4 December: Security culture, monitoring, measuring, and continual improvement
Building and sustaining an information security culture. Security awareness programmes. Monitoring and measurement frameworks. Metrics and reporting for executive and board audiences. Continual improvement of the information security programme.

Certification exam — scheduled separately by each student via the PECB KATE platform after completing the programme.

Live online delivery

The PECB CISO at Fortify Institute is delivered live across four Thursdays in November and December — not as recordings or self-paced content. Each session runs 9:30am–5:30pm Irish time with a 2-hour break, giving 6 hours of focused learning per day.

Note the gap week: Sessions 1 and 2 run on consecutive Thursdays (6 and 13 November). Session 3 follows on 27 November (20 November is a gap week). Session 4 completes the programme on 4 December. This schedule is intentional — the gap gives participants time to consolidate and apply learning between the more intensive early sessions.

All sessions are recorded and available on the Fortify Community platform if you need to revisit any content before your exam.

The Fortify Community platform

All CISO students receive access to the Fortify Community platform throughout their studies — a dedicated space for questions, resources, cohort discussion, and session recordings. Jan’s support continues beyond the four live days: if you need additional preparation before sitting your exam, you can access ongoing support through the platform.

PECB CISO certification

After completing the four-day programme and passing the PECB Chief Information Security Officer exam, you can apply for PECB certification.

Two credential levels:

• PECB Certified Information Security Officer — awarded on passing the exam with no prior professional experience requirement. Demonstrates foundational CISO competency.
• PECB Certified Chief Information Security Officer — the full executive credential, awarded on passing the exam plus five years of professional experience (including two years in information security) and 300 hours of CISO project activities.

Both credentials require signing the PECB Code of Ethics.

The CISO exam covers five competency domains:

• Domain 1: Fundamental concepts of information security
• Domain 2: The role of CISO in an information security programme
• Domain 3: Selecting a security compliance programme, risk management, and security architecture and design
• Domain 4: Operational aspects of information security controls, incident management, and change management
• Domain 5: Fostering an information security culture, monitoring, measuring, and improving an information security programme

General information

• Certification and examination fees are included in the €1,999 course price
• 31 CPD (Continuing Professional Development) credits awarded on completion
• Participants receive over 450 pages of PECB training materials including explanatory content, examples, best practices, exercises, and quizzes
• Interactive learning format including essay-type exercises and scenario-based multiple-choice quizzes
• Candidates who do not pass the exam on the first attempt are eligible for one free retake within 12 months

Why choose Fortify Institute for your CISO?

Fortify Institute is Ireland’s PECB Authorised Silver Partner. Jan Carroll holds PECB certifications in ISO/IEC 27001 Lead Implementer and Lead Auditor — the information security management framework that underpins the CISO role. She also holds ISO/IEC 42001 Lead Implementer and Lead Auditor credentials, reflecting the increasingly important intersection of AI governance and information security at senior leadership level.

The CISO programme at Fortify is delivered in a small cohort format with direct access to Jan throughout all four sessions. This is not a lecture — it is an interactive programme where your organisation’s specific context, challenges, and regulatory obligations can be explored directly.

How CISO connects to the Fortify training pathway

Many professionals take ISO 27001 Lead Implementer or Lead Auditor first, then progress to CISO as they move into senior roles. View all cybersecurity courses →

Ask about our discounts

Group discounts available for three or more participants from the same organisation. Discounts also available for Cyber Ireland members, WiCyS members, career changers, and returners. Email [email protected] for details.

Frequently asked questions

Do I need ISO 27001 certification before attending?
No formal prerequisite, but a fundamental understanding of information security principles is recommended. ISO 27001 Lead Implementer or Lead Auditor certification is ideal preparation and gives you the strongest foundation for the CISO programme.

Is the exam included in the €1,999 price?
Yes. The €1,999 fee includes the PECB Chief Information Security Officer exam, all course materials, and four full days of live instruction.

Why is there a gap week between Sessions 3 and 4?
Sessions 1 and 2 run on consecutive Thursdays (6 and 13 November). Session 3 runs on 27 November, with a gap week on 20 November. Session 4 completes the programme on 4 December. The gap is intentional — it gives participants time to consolidate learning and apply frameworks before the final session on culture, monitoring, and continual improvement.

When do I sit the exam?
The certification exam is scheduled by each student individually via the PECB KATE platform after completing the four live sessions. You choose your own date and sit it online from wherever you are.

What is the difference between PECB Certified Information Security Officer and PECB Certified Chief Information Security Officer?
Both require passing the same exam. The Certified Information Security Officer credential has no experience requirement. The Certified Chief Information Security Officer credential additionally requires five years of professional experience (including two years in information security) and 300 hours of CISO project activities. Most students who are actively working in information security will qualify for the full CISO credential.

Can I pay by invoice?
Yes. Email [email protected] to arrange invoiced payment for individuals or teams.

Enrol Now

Not sure? Book a 15-minute call with Jan →

View all PECB courses →