Recognition by the NCSC for competent cyber security professionals
The NCSC has announced the forthcoming closure of the CCP scheme
New applications will close on the 30th September 2023.
For full details of the closure of this scheme and details of the new chartership initiative run by the UKCSC, please follow the link below.
https://www.ncsc.gov.uk/news/forthcoming-closure-of-ccp-scheme
Recognising competent cyber security experts
Certified Cyber Professional (CCP) recognition will enable you to demonstrate to an employer your Cyber Security competence, knowledge and skills. Individuals can currently achieve recognition as a cyber security Risk Management specialist or Security Architecture specialist.
APMG is a Certification Body for the CCP assured service – recognising individuals who meet the National Cyber Security Centre’s assessment standards.
The National Cyber Security Centre (NCSC):
“The Certified Cyber Professional assured service is a recognition of competence which is awarded to those who demonstrate their sustained ability to apply their skills, knowledge and expertise in real-world situations.”
Why was the Certified Cyber Professional assured service introduced?
The Certified Cyber Professional assured service was developed in consultation with government, industry and academia to address the growing need for cyber security specialists in the UK.
It sets the standard for UK cyber security professionals and contributes to NCSC efforts to build a community of recognised professionals.
The Certified Cyber Professional assured service previously certified individuals in cyber security roles. NCSC have responded to feedback from Cyber Security professionals and the industry and people will now be recognised against specialisms.
Who is the Certified Cyber Professional assured service for?
It is currently aimed at Risk Management and Security Architecture Cyber Security professionals working in both the private and public sectors. Allowing individuals to demonstrate their knowledge, experience and skills. It can also help organisations select Cyber Security professionals for assignments and be used to guide professional development of employees.
Benefits for Certified Cyber Professionals:
- Independent verification and formal recognition of your Cyber Security skills and competence – providing employers and clients with proof of capability
- Confirmation of your ability to use your specialist knowledge and expertise effectively to deliver business benefits
- You become part of a recognised professional body from which employers can recruit.
Benefits for organisations of using Certified Professionals:
- Enables employers and clients to easily identify competent professionals, who have demonstrated their expertise in a business environment – safe in the knowledge they have been rigorously assessed
- The scheme can be used as part of a career development pathway – as an independent check of practitioner’s expertise
- Choosing to use suppliers who employ certified professionals may help to reduce supply chain risks.
The Assessment Process
Cyber Security specialists can choose from two levels of specialism: Certified Cyber Professional and Associate Cyber Professional. To start the process for both levels you need to prove that you have foundational knowledge of cyber security. This can be shown through having one or more of the below:
- An NCSC-certified degree (undergraduate or postgraduate)
- Certified Information Systems Security Professional (CISSP), including full membership of (ISC)²
- Certified Information Security Manager (CISM), including full membership of ISACA
- Full membership of the Chartered Institute for Information Security (CIISec)
- Proof of having passed an appropriate NCSC internal skills level assessment
- Proof of having completed an internal NCSC professional development framework (for example for cyber security architecture).
For Security Architecture only, candidates can apply through an additional route:
- NCSC Certified Cyber Security Consultancy Scheme head consultants and NCSC staff members holding a minimum of security architecture skill 6.4 level 3 may vouch for the foundational knowledge of applicants with whom they have worked in the previous 2 years. They must have worked with these individuals for a period of no less than 12 months.
You will then be required to submit a case study and invited to attend an interview. Detailed guidance on the process and which specialism is appropriate for you is available here. To request further information about the application process and for information on the fees, please email: ccp@apmg-international.com. Once achieved recognition lasts for three years. Re-validation is required every 18 months to ensure professionals have remained up to date. To re-validate their certification professionals will need to demonstrate continuing professional development.
Book your assessment for the Risk Management Specialism:
Book a Re-Validation of your Certified Cyber Professional Recognition
Book a Re-Validation of your Associate Cyber Professional Recognition
Book your assessment for the Security Architecture Specialism
Book a Re-Validation of your Certified Cyber Professional Recognition
Book a Re-Validation of your Associate Cyber Professional Recognition
Professionals who were Certified in a Role
CCP is currently in a transition period – with certification in specialisms being introduced. No-one is required to hold both a role and a specialism certification for the same cyber security activity. All candidates with a non-expired role certification are unaffected – your role certifications will continue to be valid in the usual way, which includes the need to revalidate, until the period for which you were certified has expired.
If you have any queries about the above, please email james.davies@apmgroup.co.uk
