Transition of CTL and CTM qualifications

The CHECK scheme standard has always required CTMs and CTLs to pass specific examinations provided by CREST and The Cyber Scheme (and previously the Tigerscheme). However, now that the UK Cyber Security Council (UK CSC) has created a specialism for Security Testing and launched the ‘Chartered’, ‘Principal’ and ‘Practitioner’ Professional Titles, the NCSC is changing their approach for CHECK.

By 31 March 2025, all CHECK Team Leaders must have achieved a UK Cyber Security Council Security Testing Title at the ‘Principal’ level or higher. By 31 March 2026, all CHECK Team Members must have achieved a UK Cyber Security Council Security Testing Title at the ‘Practitioner’ level or higher.

All current CHECK Team Members and Leaders will need to hold a Professional Registration Title from one of the Licensed Bodies approved by Council for the Security Testing specialism. The ‘NCSC-approved’ exams will no longer be sufficient: instead, NCSC will recognise one of the relevant Council Professional Registration Titles in the Security Testing specialism. All CHECK Team Members and Leaders will need to have undertaken and passed Part A (technical) and Parts B-E (soft skills) in Security Testing.

The process will be to apply for an appropriate Security Testing title through one of the Council’s approved licensed bodies. The title process will cover the technical examination (Part A) and an additional soft skills assessment (Parts B-E).

This application process will require you to submit an application form and undertake a mandatory exam (Part A, unless this is already passed and remains valid). It is then followed by either a peer-review interview or a written independent attestation. You can choose which Licensed Body to make your application with, regardless of which organisation you took your examination with.

New or recently-qualified CTLs (with less than three years’ experience) generally map to the Principal title. More experienced CTLs tend to map to Chartered title, particularly when they have more than five years’ experience.

At the moment the process is taking around 8 weeks when applying through The Cyber Scheme. Please ensure your application is submitted 2-3 months before deadline to ensure the process is completed; we expect to be very busy as deadlines approach.

It’s a peer review process and The Cyber Scheme has appointed assessors who carry out the interviews. They are largely from industry and have the appropriate professional title in the appropriate specialism.

It’s probably best to use more than one piece of evidence across the application, but it doesn’t have to be one for one.

You don’t need to renew the Professional title, but to remain on the Professional Register, you need to engage in CPD (Continuing Professional Development). Our full CPD Policy will shortly be available on our website. There is some guidance on the Council’s website.

Yes, it’s another professional title that is assessed against the same competencies but in more depth.