What’s happening to the Certified Cyber Professional scheme in 2023?

As we announced last year, responsibility for running the cyber security industry’s Certified Cyber Professional (CCP) scheme has transferred from NCSC to the UK Cyber Security Council.

This forms part of ongoing work to introduce a new, universally recognised professional standard for the industry, which will align to the sector’s 16 recognised specialisms.

As part of this work, we have been working closely with partners to launch pilot schemes for chartering individuals in Cyber Security Governance & Risk Management; Secure System Architecture & Design; Cyber Security Audit & Assurance; and Security Testing. We will be continuing to launch pilots across specialisms throughout the year ahead.

For cyber practitioners who currently hold a specialism-based certification through the CCP scheme, there has been no immediate impact from the transition of the scheme from NCSC to the Council. Practitioners who hold a specialism based CCP certification are still able to revalidate this with their existing certification body, if required, as they normally would.

In addition to this, the Council has developed a top-up process to allow practitioners with specialism based CCP certifications to transfer to one of its aligned Chartered or Principal titles. The option to undertake the top up process and transfer from a CCP certification to a professional title aligned to the Council’s professional standard is currently available for practitioners with certifications related to the specialisms of Cyber Security Governance & Risk Management.

For those interested in doing so, the assessment criteria for making this transition is available on The Route to Chartership for the UK’s Cyber Professionals page of our website. Practitioners can find out more information about the process of transferring from the certification body from which they received their existing certification.

Practitioners who have a recognised certification through the CCP scheme will be able to transfer across to an aligned accreditation which is recognised against the Council’s professional standard; and we would recommend contacting your certification body in the first instance.

For those with a specialism in Secure System Architecture & Design, the top up process for CCP holders will be available later this year when they are due to re-validate. The Council will also roll out the top-up process for the specialism of Cyber Security Audit & Assurance, this is currently under development.

Legacy role-based CCP certifications

It is important to note that individuals who hold a legacy role-based certification through the CCP scheme are no longer able to renew this certification as the legacy element of the scheme has closed. Existing certifications granted from 2021 onwards will, however, remain valid for three years from when the latest validation or revalidation was granted.

Practitioners affected by this have already been notified directly by the NCSC and the Council has prioritised the delivery of pilot schemes which encompass these roles, enabling those affected to transfer across to the Council’s professional titles.

Those affected by this change should contact their existing CCP certification body.