Learn what Executive Order 14028 actually requires of software producers, how NIST SP 800-218 turns those requirements into nineteen practices and forty-two tasks, and how the OMB memoranda and the CISA attestation form make them a signature obligation. Then map every practice to the Safeguard capability that produces its evidence, from SBOMs and Sigstore attestations to reachability-prioritized remediation and the Compliance & GRC suite, and assemble an attestation package that survives review.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
