CREST is licensed to process and is currently accepting applications for the following Professional Titles within the Security Testing specialism:
Chartered Cyber Security Professional (ChCSP)
Principal Cyber Security Professional (PCSP)
The application form includes both technical and non-technical competency questions based on the UK Cyber Security Council Standard for Professional Competence and Commitment (UK CSC SPCC).
For the Security Testing specialism, a contextualisation document has been produced showing the typical types of evidence you can provide to meet the competence and commitment statements.
The application form includes the following sections:
Note that the requirements below currently apply to fulfil the technical competence requirements (competence A) for Chartered and Principal titles:
Chartered | Principal | |
---|---|---|
Certifications | CREST CCT INF or CREST CCT APP or Equivalent qualifications approved by the UK CSC | CREST CCT INF or CREST CCT APP or Equivalent qualifications approved by the UK CSC |
Other requirements | Applicants must have successfully passed one of the required certifications, and be able to demonstrate significant delivery experience at Team Leader level. (For example, having re-validated a CHECK Team Leader qualification at least once). | Applicants must have successfully passed one of the required certifications. |
Cost | 700 GBP +VAT | 700 GBP +VAT |
Special CREST Member promo* | See below drop-down | See below drop-down |
Annual renewal fee | 99 GBP +VAT | 99 GBP +VAT |
* Please use your company email address when registering to confirm eligibility for this rate.
Standard fees
Fee Element | Fee | Due |
---|---|---|
Part 1 – application and initial assessment fee | £250+VAT | When applying |
Part 2 – final assessment and registration fee | £450+VAT | Upon approval, prior to being awarded title |
Total | £700+VAT | - |
Special promotional CREST Member discount
For employees of CREST member companies, CREST is offering a special 30% discount for applications submitted between 1 July and 30 September 2024. (Note this excludes current CHECK Team Leaders for whom a separate process exists).
Fee Element | Fee | Due |
---|---|---|
Part 1 – application and initial assessment fee | £250+VAT | When applying |
Part 2 – final assessment and registration fee | Upon approval, prior to being awarded title | |
Total | - |
Payment can be made using a debit or credit card and the fee is non-refundable. Further information on payment will be provided once you have filled in the registration form.
Following successful registration annual renewal fees of £99 + VAT apply to remain on the register.
If the submitted application is considered borderline** the fee includes one opportunity to strengthen the application. This will take the form of either a request for additional evidence or being invited for a discussion via a video call, as determined by CREST.
If the application is unsuccessful, where applicable, you can request that the application is assessed at the level below at no additional charge.
* Please use your company email address when registering to confirm eligibility for this rate.
** Based on CREST’s assessment of the application.
Before you begin the application process, please ensure you have checked the following:
CREST continues to work with the UK Cyber Security Council on other titles and specialisms as follows:
Practitioner Cyber Security Professional
CREST is currently participating in a pilot with the UK CSC to offer this title for the Security Testing specialism in the future.
The pilot is currently closed to new applicants.
Please check back at a later date for more information.
Associate Cyber Security Professional
This title is not currently being offered by the UK Cyber Security Council.
Please check back at a later date for more information.
CREST is also taking part in the pilot for the Incident Response specialism and working with the UK CSC and other licensed bodies to introduce red teaming qualifications into the scope of the Security Testing specialism.
The information on this page supports and is informed by the UK Cyber Security Council.