Buying & Building Cyber Services icon
Back
Accreditation Pathway & Membership icon
Back
Skills, Certifications & Careers icon
Back
News, Events & Research icon
Back
About Us icon
Back
Login to profile
Join Today Find a Supplier

CREST Accredited Business Teams

Home  »  CREST Accredited Business Teams

Whether you are an internal red team at a major bank, a security operations team or in-house incident response capability within a critical national infrastructure operator, CREST accreditation provides independent assurance that your team meets a rigorous and consistent standard.

Who is this for?

This accreditation route is intended for any team, department, function, centre of excellence or shared service that delivers cybersecurity services within a business or corporate group – and that is not a commercial cybersecurity service provider.

Examples include:

Why become a CREST Accredited Business Team

Accreditation signals to your clients, regulators, auditors, boards and oversight bodies that your internal capability meets a benchmark equivalent to the best in the industry. It also demonstrates:

 

What evidence does CREST look for in accrediting business teams?

The standard does not change, only how some evidence is provided. For example, corporate insurance arrangements satisfy commercial insurance requirements. Internal governance, corporate policies, internal customers and shared functions are all valid evidence. CREST guidance explains how each requirement translates to an internal context.

Get started
Read the full guidance for internal teams, then contact CREST to discuss your application.
Apply for CREST Accredited Team accreditation Read the guidance for CREST Accredited Teams Make a general enquiry About our mission

How do CREST standards apply to business teams?

The guidance may be applied to service areas including, but not limited to:

  • penetration testing;
  • security operations centre services;
  • cyber threat intelligence;
  • incident response;
  • vulnerability assessment;
  • security architecture;
  • incident exercising; and,
  • other CREST-accredited services where the service is delivered internally.

 

Ready to get accredited?

Fee Structure

Application Fee 

 A non-refundable fee is required when starting an accreditation application. This fee covers:  

– The assessment of the application

– One resubmission if the initial application does not meet requirements

– The administration and processing of the application

 

 

 

 

 

 

 

 

 

 

Annual subscription

Annual subscription fees are payable each year to maintain CREST Accredited Team status.  

To help drive up global standards and grow capacity in local markets, we have introduced a supported rate for teams based in lower-income countries. You can find out more here. 

Applicants wishing to commit to a multi-year subscription and pay upfront may contact [email protected] to discuss the applicable discount.

Your Accreditation Journey

As part of your accreditation journey, you will have access to all the information, requirements and assessment steps you need in one place.

We recommend completing the following steps in order to ensure you have everything in place before submitting your accreditation application.

 

 

 

 

 

 

 

 

 

 

Apply for CREST Accreditation for your business team →