What CIISec does

CIISec, formally The Chartered Institute of Information Security, is the UK's chartered professional body for the information and cyber security profession. Established by Royal Charter on 12 December 2018 and registered as a company limited by guarantee, the organisation is headquartered in Offenham, Worcestershire and operates as a non-profit with 11-50 employees. CIISec serves individual practitioners, corporate organisations and students through three membership tiers (Individual, Corporate, Student), with corporate pricing structured by annual turnover. Its mission is supported by a Board chaired by Capita Group CISO Luke Beeson and led operationally by CEO Amanda Finch.

The organisation's underlying 'product' is a professional credentialing and content platform rather than a software application. Core components include the Skills Framework (now at v4, with a new Human Centric Security skill area), the Roles Framework and the Knowledge Framework developed in collaboration with industry, government and academia; tiered development programmes (Associate, Full, Masterclass); the CyberEPQ qualification; the Headstart early-career programme; the CPD tracking system; and the Career Mapping Tool. Operational technology integration is limited, with a Blockmark Tech registry providing certificate verification for issued credentials. CIISec also administers the NCSC/CESG Certified Cyber Professional (CCP) scheme and acts as a Licensed Body for the UK Cyber Security Council, channeling members into chartered professional registration.

The revenue model is dominated by recurring annual membership fees (with no VAT applied in the UK), supplemented by one-time course and event fees (including the annual CIISec Live conference), certificates of completion, and grant funding. A 2023 award from the UK Department for Science, Innovation and Technology funded CyberEPQ expansion. Go-to-market is community-led and event-driven: SEO-style organic discovery via the website, content marketing through ABC Guides and the State of the Security Profession report, podcasts, social channels, and the flagship CIISec Live conference. Distribution combines self-serve individual sign-up with direct sales for corporate memberships, limited primarily to the United Kingdom though content is consumed globally.

Name

CIISec

Legal name

The Chartered Institute of Information Security

Website

https://ciisec.org

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

CIISec, the Chartered Institute of Information Security, is the UK's chartered professional membership body for cyber and information security practitioners, offering individual, corporate and student memberships alongside industry-standard skills, roles and knowledge frameworks.

Ownership category

akta.pro rank

Product category

Professional Membership and Cyber Security Certification

NAICS

Professional Organizations (813920)

SIC

Services-Educational Services (8200), Services-Membership Organizations (8600)

akta.pro primary industry

Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)

akta.pro secondary industry

Information Security, Privacy & IT Governance (CISSP CPE, Privacy CE) (EDAAALAL)

Keywords

• Professional membership institute
• Cybersecurity certifications
• Information security frameworks
• Professional development programmes
• Cyber security credentials

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Others

Revenue model

1. Corporate Membership Fees: Annual membership fees paid by corporate bodies, partnerships, and unincorporated associations. Tiers differ based on annual turnover. The Corporate Member has the right to nominate staff for individual membership of CIISec.
2. Individual Membership Fees: Annual membership fees paid by individual professionals. Tiers differ based on knowledge, experience and accreditations. Minimum term is one year with annual billing.
3. Courses and Events: Fees for various courses and events offered by CIISec. Course participants receive digital certificates upon successful completion.
4. UKCSC Professional Registration Fees: Additional fees for those holding UK Cyber Security Council professional registration titles, including annual fees due on renewal.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

CIISec is a chartered professional membership institute that delivers tiered Individual, Corporate and Student memberships along with structured development programmes, industry-standard Skills/Knowledge/Roles Frameworks, certification schemes and the annual CIISec Live conference for cyber and information security professionals. It operates as a Certification Body for the NCSC/CESG CCP scheme and as a Licensed Body for the UK Cyber Security Council, providing accreditations, CPD tracking, career mapping and ongoing professional recognition.

Product overview

CIISec offers a comprehensive professional ecosystem for cybersecurity professionals through a platform-plus-membership architecture. The core offering consists of tiered membership types (Individual, Corporate, and Student) providing accreditation, resources, and professional recognition. The Development Hub delivers structured programmes including Associate/Full Development Programmes, Masterclass Programme, CyberEPQ (cybersecurity Extended Project Qualification), Headstart, and Academic Partnerships. Supporting resources include Skills, Knowledge, and Roles Frameworks (industry-standard competency definitions), Career Mapping Tool, ABC Guides covering cybersecurity topics, Cyber Sessions Podcast, and annual State of the Industry Profession reports. CIISec also hosts the annual CIISec LIVE conference and acts as Certification Body for the NCSC/CESG Certified Cyber Professional (CCP) scheme.

Differentiator

Problem solved

Functional benefit

Products and services

• Individual Membership Tiered annual professional membership for individual cyber and information security professionals demonstrating commitment to professionalism in the field. Provides access to accreditation pathways, development programmes, frameworks, CPD tracking and community resources at varying subscription levels based on experience and qualifications.
• Corporate Membership Annual organisational membership for corporate bodies, partnerships and unincorporated associations, with tiers based on annual turnover. Provides access to talent development programmes, industry-standard Skills/Knowledge/Roles Frameworks, the ability to nominate staff for individual membership, and a recognised mark of commitment to cyber professionalism.
• Student Membership Annual student membership for those studying cyber and information security related courses. Provides exclusive resources, access to CIISec events, networking opportunities and the ability to contribute to Pulse magazine.
• Associate Development Programme Structured development programme for early-career cyber professionals at the associate level, providing a defined progression pathway and skill development framework.
• Full Development Programme Comprehensive development programme for established cyber professionals seeking advanced skill development, structured progression and professional advancement to full member status.
• Masterclass Programme Expert-led masterclass sessions delivering targeted skill development in specialised cyber security topics for CIISec members and the wider community.
• CyberEPQ Extended Project Qualification in cyber security, supported by UK Department for Science, Innovation and Technology (DSIT) funding, providing a formal qualification for UK students in school and college settings, with curriculum covering AI, quantum computing and blockchain.
• Headstart Early-career programme designed to help students and emerging professionals enter the cyber security field, providing structured support for those at the start of their cyber security careers.
• Career Mapping Tool Interactive digital tool that helps cyber security professionals identify the most suitable CIISec membership route and plan their career pathway within the profession.
• NCSC/CESG Certified Cyber Professional (CCP) Scheme Government-recognised professional certification scheme setting standards for Information Assurance and cyber security roles across UK Government, with CIISec serving as the Certification Body. Awards digital certificates on successful completion and supports verification via Blockmark Tech.
• CIISec Skills Framework Industry-standard framework for defining and assessing cyber and information security skills and competencies, co-developed with industry, government, academia and security leaders. Used by employers for capability assessment, by CIISec membership tiers, and as the basis for development programmes.

Quantifiable outcome

• 400 students supported in 2023-24 through CyberEPQ programme

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

One partnership is on record.

• UK Cyber Security CouncilcoreStrategic or Co-development Partner · 12 December 2018CIISec acts as a Licensed Body for the UK Cyber Security Council, which sets standards for information assurance and cyber security roles across UK Government. Members may register with UKCSC for professional titles. CIISec supports the UKCSC's mission to professionalize the cyber security industry.

Scale indicators3 records

Recent moves5 records

Expansion highlights5 records

Emerging players

• EC-Council: EC-Council is a commercial certification body best known for the Certified Ethical Hacker (CEH) credential, serving individual cyber practitioners. Comparable to CIISec as a competing provider of individual cyber certifications, but commercially driven rather than chartered.
• GIAC (Global Information Assurance Certification): GIAC provides technical security certifications tied to SANS training, focused on hands-on cyber skills. Comparable to CIISec's certification and skills-framework activities, with a more technical and commercial orientation versus CIISec's chartered non-profit stance.

Direct peers

• ISACA: ISACA is a global professional association for IT governance, security, risk, and audit professionals, with CISA/CISM/CRISC certifications and CPE programmes. Closely comparable to CIISec's role as a chartered institute providing certifications, frameworks, and member CPD in cyber and information security.
• IAPP (International Association of Privacy Professionals): IAPP is the largest global membership body for privacy professionals, offering CIPP/CIPM/CIPT certifications, CPE, and member resources. Comparable to CIISec as a non-profit chartered-style membership organisation with certification programmes, frameworks, and corporate memberships in a closely adjacent security discipline.
• CREST: CREST is a UK-based, not-for-profit accreditation body for the cyber security industry, providing standards and certifications for companies and individuals. Directly comparable to CIISec's UK-focused professional standards and accreditation remit, particularly for technical security roles.
• (ISC)²: (ISC)² is a global, non-profit membership body for cybersecurity professionals, offering CISSP and other flagship certifications, CPE programmes, and member frameworks. Directly comparable to CIISec as a chartered, non-profit cyber professional institute with tiered individual/corporate memberships and certification authority.
• BCS, The Chartered Institute for IT: BCS is a UK-based chartered professional body for IT practitioners offering individual and corporate membership, professional registration, and frameworks for IT skills. Highly comparable to CIISec as a fellow UK Royal Charter-holding professional body serving overlapping enterprise and individual member bases.

Broad incumbents

• SANS Institute: SANS is a major commercial cybersecurity training and certification provider, with GIAC credentials and a global training catalogue. Comparable as a competing provider of cyber certifications and professional development, but commercial and US-headquartered rather than a UK chartered non-profit.
• CompTIA: CompTIA is a major US-headquartered vendor-neutral IT certification body offering Security+, CySA+, and other cyber credentials with broad corporate adoption. Comparable to CIISec in the certification/credentialing space, though broader in IT rather than security-specialist.

Others

• The Cyber Security Council (UK): The UK Cyber Security Council is the chartered body setting standards for the cyber profession, of which CIISec is a Licensed Body. Comparable as the apex regulatory authority CIISec helps to operationalise through member registrations and certifications.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks7 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/c/CharteredInstituteofInformationSecurity
• LinkedInlinkedin.com/company/ciisec
• Xx.com/CIISecHQ

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CIISec