Non-commercial cybersecurity functions such as a SOC team or an in-house incident response capability within a central government department, can gain CREST accreditation, providing independent assurance that your team meets a rigorous and consistent standard.
Who is this for?
This accreditation route is intended for any team, business unit, department, function, centre of excellence or shared service that delivers cybersecurity services within government – and that is not a commercial cybersecurity service provider.
Why become a CREST Accredited Government Team
Accreditation signals to regulators, auditors, boards and oversight bodies that your internal capability meets a benchmark equivalent to the best in the industry. It also demonstrates:

What evidence does CREST look for in accrediting government accredited teams?
The standard does not change, only how some evidence is provided. For example, corporate insurance arrangements satisfy commercial insurance requirements.
Internal governance, corporate policies, internal customers and shared functions are all valid evidence. CREST guidance explains how each requirement translates to an internal context.
How do CREST standards apply to government teams?
The guidance may be applied to service areas including, but not limited to:
Application Fee
A non-refundable fee is required when starting an accreditation application. This fee covers:
– The assessment of the application
– One resubmission if the initial application does not meet requirements
– The administration and processing of the application
Annual subscription fees are payable each year to maintain CREST Accredited Team status.
To help drive up global standards and grow capacity in local markets, we have introduced a supported rate for teams based in lower-income countries. You can find out more here.
Applicants wishing to commit to a multi-year subscription and pay upfront may contact [email protected] to discuss the applicable discount.
As part of your accreditation journey, you will have access to all the information, requirements and assessment steps you need in one place.
We recommend completing the following steps in order to ensure you have everything in place before submitting your accreditation application.