Certifications
Attest a competence, not an attendance
Every exam publishes its blueprint, its domain weighting and its pass mark. Most questions present a situation to arbitrate rather than a definition to recall. Every certificate carries a publicly verifiable code.
Certified Business Continuity Practitioner
The reference certification for the continuity track
Attests the ability to run a complete continuity programme: analysis, design, implementation and validation, in line with ISO 22301 and BCI good practice. The exam tests professional judgement as much as knowledge of the texts: most questions present a situation to arbitrate.
- questions
- 20
- Duration
- 40 min
- Pass mark
- 70 %
- Validity
- 36 months
Certified Operational Resilience Practitioner
Important services, tolerances, mapping, severe scenarios
Attests command of the operational resilience framework as practised by European and UK supervisors: identifying important services, setting and defending impact tolerances, end-to-end mapping and a severe scenario testing programme.
- questions
- 16
- Duration
- 35 min
- Pass mark
- 72 %
- Validity
- 24 months
Certified Operational Risk Practitioner
Taxonomy, RCSA, losses, indicators, scenarios
Attests command of the full operational risk toolkit and, above all, the ability to connect a measurement to a decision. The exam rewards judgement: recognising a hollow RCSA campaign, a non-predictive indicator or an unusable root cause.
- questions
- 16
- Duration
- 35 min
- Pass mark
- 70 %
- Validity
- 36 months
Certified IT Continuity Practitioner
Architecture, backups, measured testing
Attests the ability to design, cost and prove an IT recovery capability: deriving objectives from the business, choosing an architecture, protecting backups against a compromised administrator, and honestly measuring restoration times.
- questions
- 16
- Duration
- 35 min
- Pass mark
- 70 %
- Validity
- 36 months
Certified Crisis Manager
Structure, conduct, communication, exercises
Attests the ability to staff and run a crisis team, decide under uncertainty, communicate without making things worse, and design an exercise programme that genuinely progresses. The exam includes a substantial proportion of scenario items.
- questions
- 16
- Duration
- 35 min
- Pass mark
- 70 %
- Validity
- 36 months
Certified DORA Specialist
The five pillars, article by article
The most demanding certification in the catalogue. It attests operational command of Regulation (EU) 2022/2554: scope and proportionality, ICT risk framework, incident classification and reporting, testing programme and TLPT, register of information and contract clauses.
- questions
- 20
- Duration
- 40 min
- Pass mark
- 75 %
- Validity
- 24 months
Certified Cyber Resilience Practitioner
Holding when the defences have failed
Attests the ability to connect incident response, crisis management and continuity, to run the first hours of a ransomware incident, and to design arrangements that survive compromise of their own administration tooling.
- questions
- 12
- Duration
- 30 min
- Pass mark
- 70 %
- Validity
- 24 months
Certified Third-Party Risk Practitioner
Segment, contract, exit
Attests the ability to distinguish criticality from spend, run proportionate due diligence, draft genuinely enforceable clauses, measure tier-2 concentration and build testable exit strategies.
- questions
- 12
- Duration
- 30 min
- Pass mark
- 70 %
- Validity
- 36 months