CISSO
Certified Information Systems Security Officer (CISSO)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certified Information Systems Security Officer (CISSO®) is a Mile2® certification aimed at professionals who own or aspire to the information systems security officer role - the person accountable for governance, architecture oversight, operations, incident response, and compliance alignment inside an organization. Mile2 describes its portfolio, including CISSO®, as university and ANSI/ANAB-aligned certifications built for hands-on, job-ready skills that employers trust, and it positions the certification track as relevant to security analysts, network engineers, IT managers, and executive leaders. Mile2 states its content is aligned with NIST, ISO, and NICE Framework standards, and its accreditations page notes ANAB/ANSI accreditation, DoD 8140 approval, mapping to the NIST/Homeland Security NICCS Cybersecurity Workforce Framework, NSA CNSS 4011-4016 accreditation, and placement on the FBI Cyber Security Certification Requirement list (Tier 1-3). Preparation options include self-study combos, live instructor-led classes taught by a Mile2 Certified Instructor, and exam-only products; Mile2 notes that most certification exam products include an unlimited-use practice quiz and an exam prep guide, and that its training courses are not required in order to take a Mile2 certification exam. Candidates should confirm current exam logistics, pricing, and renewal terms directly with Mile2, since the source page does not publish them.
What you'll study
About CISSO preparation
Do I have to take a Mile2 course before sitting the CISSO exam?
No. Mile2 states plainly that its training courses are not required in order to take a Mile2 certification exam. You can purchase an exam-only product and sit the certification exam without attending a class. Many candidates still choose a self-study combo or live instructor-led class to structure preparation, but the choice is yours rather than a prerequisite.
What study materials come with a Mile2 exam product?
According to Mile2, most Mile2 Certification Exam products include an unlimited-use practice quiz and an exam prep guide. Self-study combos add 24/7 access to learning materials plus the certification exam, and live-online classes add instructor and peer interaction. Confirm the exact bundle contents at purchase, because inclusions vary by product line and bundle tier.
What does the CISSO exam actually cover?
Mile2 does not publish a CISSO domain breakdown on its home page, so treat any percentage weighting you see elsewhere with caution. The officer role it targets spans security governance and risk, architecture and operations, incident handling and recovery, and compliance alignment. Review the official detailed course outline for the current topic list before building a study plan, and confirm the blueprint with Mile2 directly.
How difficult is the exam, and how long should I study?
Mile2 does not publish CISSO difficulty ratings, pass rates, question counts, or time limits on the source page, so no honest number can be given here. Difficulty depends on your existing governance, operations, and compliance experience. A practical approach is to work through the prep guide and repeat the unlimited-use practice quiz until you can explain missed topics rather than merely recall answers.
What happens if I fail - can I retake it?
Retake terms are not stated in the Mile2 home page content, so confirm them with Mile2 before you book. Mile2 also offers a certification renewal program and lists certification renewal as a shop category, which implies certifications carry a maintenance cycle. Ask about both retake policy and renewal requirements, including any continuing education or fee obligations, when you purchase.
How much does the exam cost and how long is the certification valid?
Those figures are not published in the source material reviewed here, so they are deliberately left blank rather than guessed. Pricing differs across exam-only products, self-study combos, and instructor-led classes, and renewal cycles can change. Check the Mile2 shop pages and the certification renewal program page, or contact [email protected] for pre-sales questions, to get current numbers.
Is CISSO recognized by employers and government programs?
Mile2 states its certifications are ANAB/ANSI accredited, DoD 8140 approved, mapped to the NIST/Homeland Security NICCS Cybersecurity Workforce Framework, accredited by the NSA CNSS 4011-4016, and approved on the FBI Cyber Security Certification Requirement list (Tier 1-3). These are Mile2's own claims; verify current status against the relevant authority if a specific eligibility determination depends on it.
What is the most common way candidates fail?
The recurring failure pattern is memorizing practice-quiz answers instead of the underlying reasoning, which collapses when questions are phrased differently. A second trap is studying only technical controls while neglecting governance, risk, and compliance material that an officer is expected to own. Third, candidates skip the official course outline and study generic material that does not match the current blueprint.
In what order should I study for an officer-level certification?
Start with governance and risk terminology, since policy, roles, and risk treatment frame everything else. Move next to architecture and operational controls, then incident handling, disaster recovery, and forensic process. Finish with compliance, accreditation, and legal or regulatory alignment, which ties the earlier layers together. Then use the practice quiz diagnostically, revisiting weak domains rather than restarting from the beginning.