Awarded for completing Security Culture That Is Not Posters and passing its exam, demonstrating the ability to audit what an organisation actually rewards and punishes, distinguish healthy security behaviours from performative ones, run a genuinely blameless incident review while still holding a line on negligence and dishonesty, recognise and prepare for the first real incident after a culture initiative as the moment that decides whether it is believed, design an incentive metric that does not quietly reward suppression, track the timing gap between noticing and reporting as the slow signal worth watching, and plan a realistic, honestly sequenced multi-quarter path for changing culture in an organisation that has never taken it seriously.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
