CREST strengthens Cyber Assurance recognition as demand for GRC services grows

Posted by Rachel Simpson on 16 October 2026

CREST introduces new recognition for Cyber Assurance expertise and develops additional requirements for responsible AI-enabled delivery.

Cyber Assurance: a growing opportunity for CREST members

CREST is expanding its support for members delivering Cyber Assurance services, with new recognition for existing credentials, a route to accreditation and an optional AI supplement to support responsible adoption of emerging technologies.

As organisations face increasing pressure to demonstrate effective cybersecurity governance, risk management and compliance (GRC), Cyber Assurance is becoming an increasingly important part of cybersecurity. Regulatory requirements, complex supply chains and growing board-level scrutiny are driving demand for independent assurance that security controls are appropriate, effective and aligned with organisational risk.

For cybersecurity service providers, this creates opportunities to help clients assess their security posture, strengthen governance, demonstrate compliance and make informed decisions about risk.

Recognising our Members’ expertise in Cyber Assurance

To support our members operating in this area, CREST has introduced additional recognition badges for Cyber Assurance (Audit) and Cyber Assurance (Advisory), recognising eligible organisations based on existing external awards and professional credentials.

Eligible CREST members will receive this recognition at no additional cost, with the badge displayed on their CREST Marketplace profiles.

This gives members an additional way to demonstrate their Cyber Assurance capabilities and helps prospective clients identify providers with relevant expertise.

Applying for CREST Cyber Assurance accreditation

Organisations wishing to achieve CREST accreditation in Cyber Assurance can apply through the standard CREST membership application process, which provides a route for organisations delivering Cyber Assurance services to demonstrate their capabilities against CREST’s accreditation requirements, supporting greater confidence among clients and buyers of these services.

Existing Members interested in extending their existing CREST accreditation to include Cyber Assurance can apply here: https://www.crest-approved.org/membership/add-an-additional-accreditation-registration-form/

If you’re not yet a CREST member, learn more here: https://www.crest-approved.org/membership/crest-membership/

Supporting responsible AI adoption in Cyber Assurance

AI is increasingly being used to support Cyber Assurance activities, from analysing evidence and reviewing controls to assisting with risk assessments and compliance reporting, and while these technologies can improve efficiency, they also introduce questions around accuracy, transparency, data handling and human oversight.

To address these considerations, CREST is developing an optional AI-Enabled Cyber Assurance Supplement, designed to help organisations demonstrate responsible AI use within their Cyber Assurance services. The supplement sits alongside Cyber Assurance accreditation, providing an additional means of demonstrating how AI is governed and used in service delivery.

Further details, including eligibility requirements and how to apply for the supplement, will be published shortly.

Helping members respond to evolving market needs

Cyber Assurance is an important part of the wider cybersecurity ecosystem, connecting technical security practices with the governance, risk and compliance requirements that increasingly influence business decisions. Through accreditation, recognition of existing credentials and the development of AI-related assurance requirements, CREST is supporting members as they respond to changing client needs and demonstrate their expertise across a broader range of cybersecurity services.

Find out more about CREST Cyber Assurance (GRC) services:
https://www.crest-approved.org/cyber-service-categories/cyber-assurance/

Cyber Assurance: a growing opportunity for CREST members

Recognising our Members’ expertise in Cyber Assurance

Applying for CREST Cyber Assurance accreditation

Supporting responsible AI adoption in Cyber Assurance

Helping members respond to evolving market needs

You may be interested in reading this...