Certifies the ability to build, prioritise and operate a supply-chain threat model: data flow diagrams with trust boundaries, STRIDE and SLSA threat enumeration, attack-tree prioritisation informed by Safeguard scoring, and controls encoded as Policies, Gates and Guardrails with documented residual risk.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
