Awarded for completing Vulnerability Prioritization: CVSS, EPSS and Business Context and passing its exam, demonstrating the ability to combine CVSS severity, Exploit Prediction Scoring System (EPSS) probability, confirmed exploitation status and reachability into a defensible priority ordering, quantify the failure mode of a severity-only queue, and communicate and sustain a prioritization programme over time.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
