Awarded for completing Operational Resilience Testing, Including Threat Led Penetration Testing and passing its exam, demonstrating the ability to scope a resilience test against critical functions responsibly, distinguish ordinary from advanced testing and threat led testing from testing that borrows its vocabulary, avoid conflating an attack simulation with a disaster recovery drill, evidence remediation of serious findings, feed testing results into an ongoing risk management framework, and apply proportionality honestly.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
