The CREST Certified Simulated Attack Manager (CC SAM) examination tests candidates’ knowledge and expertise in leading a team that specialises in Simulated Attacks. The candidate is expected to have a good breadth of knowledge in all areas of Simulated Attack and proven experience in managing incidents, penetration tests and simulated attack exercises. The exam will assess the candidate’s ability to conduct Simulated Attacks in a realistic, legal and safe manner, ensuring appropriate evidence is collated to provide the customer with actionable intelligence of organisational risks and failings while minimising the risks to the customer’s staff, data and systems.
The CC SAM examination is delivered in Pearson Vue centres. It is divided into two parts (SAM1 and SAM2). Part One must be taken before Part Two and overall result will be released once both examination Parts have been taken.
- SAM 1 will comprise multiple-choice questions and one compulsory long form question
- SAM 2 will comprise two long form questions and a scenario-based question.
Candidates are required to meet or exceed a two-thirds pass mark in both SAM1 and SAM2 in order to pass the exam overall. A candidate’s overall result will be released once both parts of the examination have been taken (ie. there will be no result given after taking part 1).
You can download the following documents from the links below:
The Certified Simulated Attack Manager examination costs £1,600 + VAT.
The CC SAM examination is booked directly with Pearson Vue and the fee is paid directly to Pearson Vue at the time of booking SAM 1.
Recommended Preparation Material
The following material and media has been cited as helpful preparation for this examination by previous candidates:
Targeted Cyber Attack (by Cygress)
Useful Information for Candidates
Details of the Logistics and Timings of CREST examinations can be found in the Examination Preparation pages for your country of choice
CREST’s Policy for Candidates requiring special arrangements including additional time to accommodate a medical condition (including examinations delivered via Pearson Vue)
Terms and Conditions for CREST Examinations (includes hard disk drive wiping policy)