Awarded for completing Security Metrics That Survive Scrutiny and passing its exam, demonstrating the ability to design security measures that inform a named decision, hold a definition that cannot drift, draw on a source that cannot be cheaply gamed and carry a direction with a stated limit; to read a remediation distribution rather than an average; to sample a population honestly and report a confidence interval; to anticipate how each measure will be gamed and instrument the counter signal; and to present a deterioration, a missed target and a retired measure without losing credibility.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
