Select discipline option(s)

• !
  
  Intelligence Led Penetration Testing (STAR)
• !
  
  Penetration Testing
• !
  
  Vulnerability Assessment (VA)
• !
  
  Cyber Threat Intelligence (STAR)
• !
  
  Cyber Security Incident Response
• !
  
  Security Operations Centres (SOC)
• !
  
  Training Provider

• 
  CBEST is a Bank of England scheme delivering controlled, bespoke, cyber threat intelligence-led security testing to financial institutions. The tests replicate the behaviours of threat actors and focus on more sophisticated and persistent attacks against critical systems and essential services. CBEST accredited companies and professionals demonstrate extremely high levels of technical knowledge, skill and competency.

• iCast

  iCAST is a framework introduced by the Hong Kong Monetary Authority (“HKMA”) in response to the changing cybersecurity landscape. Under the HKMA Cyber Resilience Assessment Framework, banks which aim to attain the “intermediate” or “advanced” maturity level are required to conduct iCAST.

• TIBER EU

  The framework for Threat Intelligence-based Ethical Red Teaming (TIBER-EU) enables European and national authorities to work with financial infrastructures and institutions to put in place a programme to test and improve their resilience against sophisticated cyber attacks. TIBER- delivers a controlled, bespoke, intelligence-led red team test of entities’ critical live production systems. Intelligence-led red team tests mimic the tactics, techniques and procedures of real-life threat actors who, based on threat intelligence, are perceived as posing a genuine threat to entities. The test involves the use of a variety of techniques to simulate an attack on an entity’s critical functions and underlying systems.

• Assure

  A mechanism for accrediting Cyber Suppliers to conduct Cyber Audits of Aviation Organisations on behalf of the Civil Aviation Authority.

• TBEST

  TBEST is managed by OFCOM who assist the Government with its telecoms supply chain review ensuring networks remain resilient. TBEST, part of a Security and Resilience Assurance Scheme, is a threat intelligence-led penetration testing scheme based on the techniques known to be used by cyber criminals and hostile nation states that assesses how well a company can withstand a concerted attack which will help to identify security and operational resilience. DCMS have so far completed two pilots.

• GBEST

  Based on the CBEST model, GBEST is a UK Government intelligence-led security testing and cyber resiliency programme co-ordinated by the Cabinet Office.

• CHECK

  Note, list only displays those CHECK members that are also members of CREST. The NCSC’s IT Health Check Service, or CHECK, was developed to enhance the availability and quality of services provided to Government and the wider public sector. CHECK services identify vulnerabilities in IT systems and networks which may compromise the confidentiality, integrity or availability of information held on that IT system. The NCSC and CREST work in collaboration to provide a set of examinations that are acceptable to industry and meet the requirements of private and public sectors. All CHECK Team Leaders and Members have passed an approved professional examination, such as a CREST examination, that is designed to test for a basic grounding in the discipline; companies belonging to CHECK are measured against high standards set by the NCSC.

Back

Back