Developing the Profession

We not only support the cyber security industry through our audit and accreditation processes, but through our professional certifications.

CREST offers globally recognised certifications in Penetration Testing, Simulated Target Attack & Response (STAR), Incident Response and Security Architecture. These are offered at three levels: Practitioner, Registered and Certified.

We run written and practical examinations, depending on the certification, and these are delivered internationally using a mix of online proctored and exam centre delivery models.

We support candidates by publishing detailed exam syllabuses, preparation notes and reading material.

CREST certifications are recognised and valued worldwide, giving our members and other employers access to a pool of qualified and competent professionals to deliver their services.

Our certifications also giving holders a professional currency that allows them to progress their careers.

Cyber security professionals who are registered with us and who hold CREST IDs gain professional portfolios testifying to their knowledge, competencies and professional standing.

There are significant challenges for the profession in securing enough people with the right competencies from the widest possible pool of people.

That is why we work with members, Academic Partners and other stakeholders to help build professional capacity across the global cyber security industry.