Financial Crime · CCISS

Certified Cyber & Information Security Specialist

A professional qualification providing compliance and risk specialists with an understanding of cyber threats, information-security governance, access control, incident response, third-party risks and regulatory expectations.

CCISS certification badge
Overview

What This Certification Covers

The Certified Cyber & Information Security Specialist certification equips professionals with the specialised knowledge and skills needed to protect information assets and digital systems, identify, assess and manage cyber risks, and build effective organisational information security programmes that comply with regulatory requirements within financial institutions, corporations, fintech companies and government bodies.

The certification develops participants' ability to understand the cyber threat landscape and common attack methods, apply international information security frameworks and standards, design technical and administrative security controls, and manage cyber incidents and business continuity. It emphasises practical application and case studies, compliance with supervisory requirements, and integration of cybersecurity with risk management, compliance, and the prevention of fraud and digital financial crime.

Like every ACS credential, the CCISS is awarded only after a formal assessment of defined qualification outcomes — evaluating understanding, application and professional judgement, not attendance alone.

Learning Outcomes

What You Will Be Able to Do

  • Understand the principles of cybersecurity and information security and the landscape of cyber threats and cybercrime
  • Apply international information security frameworks and standards and related regulatory requirements
  • Identify, assess and manage cyber risks using a risk-based methodology
  • Design technical and administrative security controls to protect systems, networks and data
  • Manage and respond to cyber incidents and ensure business continuity and disaster recovery
  • Strengthen cyber governance and security awareness and integrate with risk and compliance functions
Curriculum

The CCISS Programme in 8 Modules

01Cybersecurity and Information Security Fundamentals5 topics
  • Information security concepts: confidentiality, integrity and availability (CIA Triad)
  • Information security versus cybersecurity and IT security
  • Information assets, their classification and data ownership
  • Defence in depth and the principle of least privilege
  • The role of the human element in cybersecurity
02The Cyber Threat and Cybercrime Landscape6 topics
  • Types of threat actors and their motivations
  • Phishing, social engineering and business email compromise (BEC)
  • Malware and ransomware
  • Denial-of-service attacks and advanced persistent threats (APTs)
  • Insider threats and privilege misuse
  • Financial cybercrime and attacks on payment systems
03Frameworks, Standards and Regulatory Requirements6 topics
  • Information security management system standard (ISO/IEC 27001)
  • NIST Cybersecurity Framework (NIST CSF)
  • Payment Card Industry Data Security Standard (PCI DSS)
  • Centre for Internet Security Controls (CIS Controls)
  • Supervisory requirements for cybersecurity and operational resilience (such as DORA)
  • The relationship between cybersecurity, data protection and privacy
04Cyber Governance and Risk Management6 topics
  • Cybersecurity governance and the role of the board and senior management
  • The role of the CISO and the organisational structure
  • Cyber risk assessment and treatment methodologies
  • Information security policies and procedures
  • Managing third-party and technology supply chain risks
  • Cyber performance and risk indicators and executive reporting
05Technical Security Controls6 topics
  • Identity and access management and multi-factor authentication (IAM/MFA)
  • Network security, firewalls and network segmentation
  • Endpoint protection, patch management and vulnerability management
  • Encryption, key management and data protection
  • Application security and secure software development
  • The Zero Trust model
06Security Monitoring and Incident Management6 topics
  • Security operations centres (SOC) and security information and event management (SIEM)
  • Cyber threat intelligence and its use
  • The cyber incident response plan and its phases
  • Digital forensics and evidence preservation
  • Incident notification to regulators and stakeholders
  • Learning from incidents and improving controls
07Business Continuity and Operational Resilience5 topics
  • Business impact analysis (BIA) and identifying critical systems
  • Business continuity and disaster recovery plans
  • Backups and protection against ransomware
  • Plan testing and tabletop exercises
  • Crisis management and communication during major incidents
08Security in Modern Environments and Emerging Technologies6 topics
  • Cloud security and the shared responsibility model
  • Security of digital banking, payments and application programming interfaces (APIs)
  • Artificial intelligence in cybersecurity and its risks
  • Building security awareness and phishing simulation programmes
  • Integration of cybersecurity with fraud and financial crime prevention
  • The future of cybersecurity and emerging challenges
Who Can Apply

Built for These Roles

  • Information security and cybersecurity specialists
  • IT, network and systems managers and engineers
  • Chief Information Security Officers (CISOs) and their deputies
  • Risk, operational risk and technology risk managers
  • Compliance and data protection officers
  • Internal auditors and information systems auditors
  • Fraud and digital financial crime prevention specialists
  • Professionals in banks, fintech companies and insurance companies
  • Staff of government and regulatory bodies responsible for cybersecurity
Assessment

How the CCISS Is Assessed

  1. 01

    The exam is administered through an accredited testing centre

  2. 02

    The computer-based exam consists of 100 multiple-choice questions

  3. 03

    Passing score: 70%

  4. 04

    Exam duration: 3 hours

Unless otherwise stated, candidates must achieve a minimum assessment score of 70%. Full entry requirements and the certification process are listed on the Certifications.

Register

Start the CCISS Certification

Registration opens on a rolling basis through ACS or an authorised ACS centre. Reach out and our team will walk you through eligibility, registration and assessment windows.

Get Registration Details