Helping shape the future of AI in cybersecurity
Working collaboratively, the group provides practical insight into how AI is changing cybersecurity services and helps inform CREST’s research, guidance, standards, assurance and accreditation activities.
The Working Group exists to ensure CREST’s AI programme is grounded in real-world experience and reflects the needs of industry.
A global community of experts
The Working Group includes cybersecurity providers, global enterprises, regulators, technology companies, academics and industry bodies from across North America, Europe, Asia-Pacific, the Middle East and Africa.
How you can contribute
There are many ways you can get involved:
Thought leadership
Share practical insight, technical expertise and opinion for blogs, reports and webinars.
Interested in helping shape the future of AI in cybersecurity?
Whether you're already deploying AI, governing its use, researching emerging technologies or helping organisations buy AI-enabled cybersecurity services, we'd love to hear from you.
Our roadmap
✅ Live: AI Charter
Bringing together organisations committed to the responsible use of AI in cybersecurity.
Find out more✅ Live: AI Principles
Nine practical principles that provide a foundation for responsible AI use.
Find out more🟢 In progress: AI Research
Research exploring how AI is changing cybersecurity services and industry capability.
🟢 In progress: Thought leadership
Articles, reports and market insight informed by Working Group expertise.
🔜 Coming soon: Further assurance
Security Testing of AI
🔜 Coming soon: Further assurance
Use of AI in Security Operations
🔜 Coming soon: Further assurance
Use of AI in Incident Response
🔜 Coming soon: Further assurance
Use of AI in Threat Intelligence
🔜 Coming soon: Further assurance
Use of AI in Threat-Led Penetration Testing
Useful links
Research & reports
CREST AI Charter & 9 Principles
FAQs
- Is the Working Group only open to CREST Members? No. We welcome contributions from CREST Members, Community Supporters and organisations across the wider cybersecurity ecosystem. with relevant expertise
- Is this a commercial forum? No. The Working Group is collaborative and non-commercial. Discussions focus on practical experience, governance and industry good practice rather than products or services.
- How much time is involved? Most members contribute through occasional workshops, consultations and document reviews throughout the year. Participation is designed to fit alongside day-to-day roles
Why join?
By joining the CREST AI Working Group you’ll have the opportunity to:

Participation is collaborative, practitioner-led and non-commercial.
Volunteers contribute their expertise through workshops, consultations, research and ongoing discussion.
Read our AI Working Group Terms and Conditions here.
We acknowledge the contribution of the following people to our AI Working Group work to date:
| Company | People |
|---|---|
| 2SecureLayer7 | Sandeep Kamble Rohit Hatagale Varun Madnani |
| Advai | David Sully |
| Ansen | Ibad Altaf |
| Binalyze | Klaus Harkonen |
| Bluesec | Imane Bachane |
| Briskinfosec | Arulselvar Thomas |
| Bug Crowd | Julian Brownlow Davies |
| Capgemini | Aaron Marsh Anil Mehan Anthony Omomia Ernest Arabome Graeme Evans Lyndon Lee |
| Capsicum Cyber | Bakir Emre |
| CBI | Menouar Othmane |
| Closed Door Security | William Wright |
| CMC Cybersecurity | Binh Xuan Vu |
| CPX | Juan Betancourt and Georgii Soroka |
| Cyberfortify | Usama Gul |
| Cybergate | Srdjan Babic, Leonard Kamal |
| Cyberintelsys | Sathish K |
| Cyberzone Global | Sanjay Verma |
| CYSIAM | Dave Benson Rick James |
| Dionach | Ioannis Pistolas |
| EY | Aaron Fenwick |
| Firmus Security | Vikneswaran Kunasegaran |
| Fortifi Cyber | Kieran Roberts |
| FPT | Le Hong Hai Nguyen Tuan Anh Hai Le Hong |
| FTI Consulting | Nebu Varghese |
| GhostOps Security | Dereck Coleman |
| Help AG | Sunil Sharma |
| HexaPrime | Rambhul Singh, Yuliya Volkova |
| IBM | Brian McGlone |
| LRQA | Chris Oakley David Parsons |
| Malcrove | Khalifa Shamsi |
| Maple Networks | Tim Luck Graham Tetley |
| Obrela | Iraklis Mathiopoulos |
| Paramount Assure | Pradeep Perinchery |
| Pentiq | Lewis Warner |
| Pro CheckUp | Richard Brain |
| RedHunt Labs | Sudhanshu Chauhan |
| Rootshell | Shaun Peapell |
| RSM | Michael van Coppenhagen |
| Secforce | Boglarka Ronto |
| Secure Ideas | Kevin Tackett |
| Sentrium | James Drew |
| Solution Lab | Audrius Vizbaras |
| Trusted Impact | Simran Sankhala |
| Vantage Point | Paul Craig |
| Wilbourne | Ryan Siu |
| Wizlynx Group | Bence Horvath Jeremy Wong |
| xyberteq | Kevin Zachary |
| Zaintech | Rajeev Nair |
| Other volunteers: | Dinesh Kumar P Eduardo de Jesus Montaño Gracian Hassan Mahmud |
