Awarded for completing Error Handling and Information Disclosure and passing its exam, demonstrating the ability to design error handling that avoids leaking internal detail, separate user facing messages from internal logging, close account enumeration and timing disclosure channels, apply fail-closed defaults to security relevant checks, review and test for information disclosure deliberately, and state honestly what error handling does and does not accomplish as a security control.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
