Certifications
Attest a competence, not an attendance
Every exam publishes its blueprint, its domain weighting and its pass mark. Most questions present a situation to arbitrate rather than a definition to recall. Every certificate carries a publicly verifiable code.
Certified Business Continuity Practitioner
The reference certification for the continuity track
Attests the ability to run a complete continuity programme: analysis, design, implementation and validation, in line with ISO 22301 and BCI good practice. The exam tests professional judgement as much as knowledge of the texts: most questions present a situation to arbitrate.
- 20
- questions
- 40min
- Duration
- 70%
- Pass mark
- 36months
- Validity
Certified Operational Resilience Practitioner
Important services, tolerances, mapping, severe scenarios
Attests command of the operational resilience framework as practised by European and UK supervisors: identifying important services, setting and defending impact tolerances, end-to-end mapping and a severe scenario testing programme.
- 16
- questions
- 35min
- Duration
- 72%
- Pass mark
- 24months
- Validity
Certified Operational Risk Practitioner
Taxonomy, RCSA, losses, indicators, scenarios
Attests command of the full operational risk toolkit and, above all, the ability to connect a measurement to a decision. The exam rewards judgement: recognising a hollow RCSA campaign, a non-predictive indicator or an unusable root cause.
- 16
- questions
- 35min
- Duration
- 70%
- Pass mark
- 36months
- Validity
Certified IT Continuity Practitioner
Architecture, backups, measured testing
Attests the ability to design, cost and prove an IT recovery capability: deriving objectives from the business, choosing an architecture, protecting backups against a compromised administrator, and honestly measuring restoration times.
- 16
- questions
- 35min
- Duration
- 70%
- Pass mark
- 36months
- Validity
Certified Crisis Manager
Structure, conduct, communication, exercises
Attests the ability to staff and run a crisis team, decide under uncertainty, communicate without making things worse, and design an exercise programme that genuinely progresses. The exam includes a substantial proportion of scenario items.
- 16
- questions
- 35min
- Duration
- 70%
- Pass mark
- 36months
- Validity
Certified DORA Specialist
The five pillars, article by article
The most demanding certification in the catalogue. It attests operational command of Regulation (EU) 2022/2554: scope and proportionality, ICT risk framework, incident classification and reporting, testing programme and TLPT, register of information and contract clauses.
- 20
- questions
- 40min
- Duration
- 75%
- Pass mark
- 24months
- Validity
Certified Cyber Resilience Practitioner
Holding when the defences have failed
Attests the ability to connect incident response, crisis management and continuity, to run the first hours of a ransomware incident, and to design arrangements that survive compromise of their own administration tooling.
- 12
- questions
- 30min
- Duration
- 70%
- Pass mark
- 24months
- Validity
Certified Third-Party Risk Practitioner
Segment, contract, exit
Attests the ability to distinguish criticality from spend, run proportionate due diligence, draft genuinely enforceable clauses, measure tier-2 concentration and build testable exit strategies.
- 12
- questions
- 30min
- Duration
- 70%
- Pass mark
- 36months
- Validity