Last updated: January 2026
These Website Terms of Use (“Terms”) govern your access to and use of the website https://www.crest-approved.org (the “Website”). The Website is operated by CREST (International) (“CREST”, “we”, “us”, or “our”), a company registered in England and Wales under company number 09805375.
By accessing or using the Website, you confirm that you have read, understood, and agree to be bound by these Terms. If you do not agree, you must not use the Website.
ABOUT CREST
CREST is an international, non-profit organisation that develops and administers cybersecurity standards, accreditations, professional certifications and collaborative research worldwide.
CHANGES TO THESE TERMS
We may update these Terms from time to time. Any changes will be posted on this page and will take effect when published. Your continued use of the Website after changes are posted constitutes acceptance of the updated Terms.
ACCESS TO THE WEBSITE
The Website is intended primarily for business, professional, and organisational users, including member and pathway organisations, certification holders, applicants, assessors, regulators, and other professional stakeholders. However, we recognise that individuals acting in a personal or consumer capacity may also access the Website. Nothing in these Terms is intended to limit or exclude any mandatory consumer rights that may apply under applicable law.
For the avoidance of doubt, use of the Website alone does not create a consumer contract between you and CREST. Any binding contractual relationship relating to memberships, accreditations, certifications, services, or applications will arise only under separate terms and conditions expressly agreed between you and CREST.
We grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Website for lawful purposes only and in accordance with these Terms.
You must not:
- misuse the Website or attempt to disrupt its operation;
- introduce viruses, malware, or other harmful material;
- attempt unauthorised access to any part of the Website or its systems;
- use the Website in breach of any applicable law or regulation.
We may suspend or terminate access to the Website at any time, without notice, if we reasonably believe these Terms have been breached.
INTELLECTUAL PROPERTY
All content on the Website, including text, graphics, logos, trade marks, designs, software, and other materials, is owned by or licensed to CREST and is protected by copyright, trade mark, and other intellectual property laws.
“CREST”, “CREST (International)”, and associated logos are registered trade marks of CREST and may not be used without permission.
You may download or print content for your own internal, non-commercial use only. You must not reproduce, distribute, modify, or otherwise use Website content without our prior written permission.
INFORMATION ON THE WEBSITE
The Website is provided for general informational purposes only. While we take reasonable care to ensure content is accurate and up to date, information may be incomplete, outdated, or subject to change.
Nothing on the Website constitutes legal, professional, or other advice. You should obtain appropriate independent advice before acting on any information provided.
THIRD PARTY AND CONNECTED WEBSITES
The Website may contain links to third-party websites. These websites are independent of CREST and are provided for convenience only.
We do not control (whether financial, editorial or in any other way), endorse, or accept responsibility for the content, security, or practices of third-party websites, and CREST does not guarantee the accuracy, relevance, timeliness, or completeness of any information on these external websites. Accessing them is at your own risk.
SECURITY AND VIRUSES
We use reasonable measures to protect the Website, but we do not guarantee that it will be secure or free from viruses.
You are responsible for configuring your own technology and security protections. We will not be liable for any loss or damage caused by viruses or other harmful material arising from your use of the Website.
DATA PROTECTION AND PRIVACY
Your use of the Website is subject to our Privacy Policy, which explains how we collect, use, and protect personal data and how you may exercise your rights. The Privacy Policy forms part of these Terms and is available here: Privacy Policy – CREST.
RESPONSIBLE VULNERABILITY DISCLOSURE
If you identify a potential security vulnerability, you must follow our Responsible Vulnerability Disclosure Policy before taking any action. Failure to comply with the policy may result in legal action. The policy is available here: Responsible Vulnerability Disclosure – CREST (crest-approved.org)
LIMITATION OF LIABILITY
To the fullest extent permitted by applicable law:
- CREST excludes all implied warranties, conditions, and representations relating to the Website;
- CREST will not be liable for any loss or damage arising from your use of, or inability to use, the Website, including indirect or consequential loss, loss of data, loss of profits, or business interruption.
Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot lawfully be excluded.
INDEMNITY
You agree to indemnify and hold harmless CREST, its officers, directors, members, and affiliates from any losses, liabilities, costs, or expenses (including reasonable legal fees) arising out of your breach of these Terms or misuse of the Website.
INTERNATIONAL USE
The Website is controlled and operated from the United Kingdom. We make no representation that content is appropriate or available for use in all jurisdictions.
If you access the Website from outside the UK, you are responsible for compliance with all applicable local laws.
SEVERABILITY
If any provision of these Terms is found to be unlawful, invalid, or unenforceable, the remaining provisions shall remain in full force and effect.
WAIVER
Failure by CREST to enforce any provision of these Terms does not constitute a waiver of that provision or any other right.
GOVERNING LAW AND JURISDICTION
These Terms are governed by the laws of England and Wales and the courts of England and Wales shall have exclusive jurisdiction, except where mandatory local laws provide otherwise.
ENTIRE AGREEMENT
These Terms, together with the Privacy Policy, constitute the entire agreement between you and CREST regarding use of the Website.
