Regions icon
Membership icon
Certification icon

CESG Certified Professional Scheme (CCP)

As part of the Government’s investment in cyber security, the IISP consortium has been appointed by CESG to provide certification for UK Government Information Assurance (IA) professionals. The consortium has been awarded a licence to issue the CESG Certified Professional (CCP) Mark based on the IISP Skills Framework, as part of a certification scheme driven by CESG, the IA arm of GCHQ. The consortium comprises the Institute of Information Security Professionals (IISP), CREST and Royal Holloway’s Information Security Group (RHUL). The IISP certifies competency, CREST provides examination for the more technical roles and RHUL supports with their experience in setting rigorous and consistent assessment processes.

The certification process is designed to increase levels of professionalism in Information Assurance and uses the established IISP Skills Framework to define the competencies, knowledge and skills required for specialist IA roles. Developed through public and private sector collaboration by world-renowned academics and security experts, the Framework has been adopted by GCHQ as the basis for its CESG Certified Professional specification.

This builds on the IISP’s existing competency-based membership programmes, so not only will an individual be certified but their areas of specialism will be recognised, offering the individual and their customers’ greater confidence that an individual has the right skills and experience for a role.

Applicants can gain certification in one or more of the following roles:

  • Accreditor
  • IA Auditor
  • Communications Security Officer / Crypto Custodian
  • Information Security Officer
  • Security & Information Risk Advisor
  • IA Architect

All roles have 3 levels of certification: Practitioner, Senior Practitioner and Lead Practitioner.

For the IA Architect role at Senior/Lead level, candidates will need to have passed the CREST Registered Technical Security Architecture (CR TSA) examination. After successfully passing this CREST examination, candidates will be called for interview by the IISP.

Further information:



Booking a CREST Examination