All
Following on from previous responses, and hopefully answering some of
the questions raised; CREST has been put together by a large number of
Pen Testing providers in the UK, although many of these are global
organisations and CREST's aspirations are of internationalisation.
CREST (GB) is a not for profit organization that aims to provide
standards for companies providing pen test services and technical
qualifications for individuals. The standards include guidance on
methodologies, code’s of conduct and staff vetting, they do not however
include actual methodologies. The professional qualification for
individuals consists of both written and practical elements, and has
been designed by individuals who are actively involved within the pen
testing industry.
Currently the technical assessments are conducted on Core skills,
Infrastructure Assessments and Web Application assessments, there are a
number of specialist areas that will be available in the coming months,
such as Wireless and VoIP. The full technical syllabus and availability
of the examinations along with all other relevant documentation
including Company Membership Applications will all be made available on
the new CREST web site in the coming weeks. With the current numbers
registered it is expected that the first available exam bookings will be
in January.
CREST is supported and aided by an Industry Advisory Panel (IAP) where
its members, taken from many sectors such as Banking, Healthcare, and
Government provide guidance and advice from the user community of pen
testing services to CREST and its members.
CREST has just completed its move to new premises, however, there is no
reason that responses should be slow, so please accept my apologies for
that. Feel free to resend any enquiry’s to either
info@crest-approved.org or admin@crest-approved.org and we will endeavor
to respond as soon as possible.
On behalf of CREST (GB) Limited
admin@crest-approved.org
Tel: 01753 722065
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
