Login to profile

CREST Appoints New European Council Members to Strengthen Regional Cyber Security Strategy

The Hague, Netherlands – CREST, the global non-profit membership body championing cyber security professionalism, is pleased to announce the re-appointment of Rodrigo Marcos Alvarez, CEO of SECFORCE Ltd, as Chair of the European Regional Council. This follows CREST’s triennial election cycle and reinforces its steadfast commitment to building capability, capacity, consistency, and collaboration across Europe.

Rodrigo brings over two decades of expertise in offensive security and red teaming to his leadership role. As CEO of SECFORCE Ltd, he has spearheaded advanced penetration testing services while fostering professional development through OWASP chapter leadership. He serves as the principal voice for the European Council on the International Council.

European Regional Council Members (2025–2028)

Nick Benson, CEO of CREST, commented:
“We are honoured to continue working with Rodrigo as Chair of the Europe Regional Council. His depth of experience in offensive security, combined with his collaborative leadership approach, positions him perfectly to guide our work across the region. The Europe Council ensures that our strategy reflects the real-world needs and diversity of cyber professionals on the ground.”

Rodrigo Marcos Alvarez, Chair of the European Regional Council, added:
“I am delighted to continue in my role as Chair at such a pivotal time for cyber security across Europe. The evolving threat environment demands that we strengthen partnerships, raise standards, and deepen engagement with regulators and the community. I look forward to working closely with my fellow council members to advance a resilient and united cyber security ecosystem across the region.”

Why It Matters

As cyber threats grow in sophistication and cross-border impact, regional governance structures like CREST’s European Council play a critical role. They ensure that strategies are tailored to the unique regulatory, cultural, and industrial landscapes of Europe, not only aligning with global best practices but also driving professional skills development, policy influence, and community building. As the Digital Operational Resilience Act (DORA) introduces new obligations for threat-led penetration testing under Article 27, CREST is actively supporting member firms to meet these requirements. Through alignment with frameworks like CBEST and accreditation of qualified providers, CREST is helping ensure its members are well-positioned to deliver compliant, high-quality services across the financial sector.

To learn more about CREST’s European activities and meet the Council members, visit: Europe – CREST

ENDS

Editors notes

About CREST

CREST is an international, not-for-profit membership body representing the global cybersecurity industry.

Since 2006, CREST has led the cybersecurity community in raising professional and organisational standards across the sector. By accrediting cybersecurity service providers and certifying individual professionals through rigorous, industry-leading examinations, CREST provides confidence to buyers, governments, and regulators alike.

CREST has accredited nearly 500 member companies which operate globally. These have been independently assessed against demanding technical, process, and governance criteria. Our professional certifications validate deep technical expertise and practical skill.

We work closely with governments, regulators, academic institutions, training partners, professional bodies, and other stakeholders around the world to support the development of a capable, consistent, and trustworthy cybersecurity ecosystem.

Media Contact:
Emma Millard
Senior Marketing & Campaigns Manager
[email protected]