Awarded for completing Answering a Customer Who Asks Were We Affected and passing its exam, demonstrating the ability to run a customer facing vulnerability response under time pressure: separating presence from exploitability, scoping a statement across product, infrastructure and supplier estates, giving an interim position that a reviewer can file, and correcting a published position without losing the customer's trust.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
