• Professional Standards

application guide

Everything you need to prepare a strong professional registration application.

A successful professional registration application is built on evidence.

Assessors are not assessing job titles, length of service or potential. They are assessing demonstrated competence against the relevant professional standard.

Your objective is to make it as easy as possible for an assessor to understand what you did, why you did it and the impact of your actions.

COMPLETE THE Application Form USING THE STAR METHOD

The single most effective way to present evidence is by using the STAR method.

STAR helps you provide the information assessors need while ensuring your examples remain clear, structured and relevant. 

The STAR technique is a method of answering questions that is comprised of four steps:

Situation

Describe the situation and when it took place.

Task

Explain the task and what was the goal.

Action

Provide details about the action you took to attain this.

Result

Conclude with the result of your action.

Focus on Your Contribution

Make sure you have read our step-by-step process to help determine the specialism and title level you wish to apply for and your application route. Now you need to ensure your application meets the requirements which our assessors will be looking for, before submitting it.

One of the most common weaknesses in applications is a lack of information about the applicant’s own role.

Assessors need to understand:

  • What you were responsible for
  • What decisions you made
  • What actions you took
  • How you influenced the outcome.

 

Avoid spending large sections of your application describing what the team did without explaining your own contribution. Where possible, write using “I” rather than “we”.

Professional History

You are expected to cover your complete professional history as well as your current work in industry. Start with your most recent post and work backwards over a 10-year period. Mention your individual  achievements, tasks, and actions, talk about yourself rather than team efforts.

  • Indicate the size and complexity of any projects or tasks you describe
  • Give an extended description of your current role
  • Explain any acronyms or abbreviations the first time you use them.

Education History

The application form also asks for your education history, such as professional qualifications, apprenticeships, and degrees.

Additional information required

You will be given the opportunity to detail any papers you have contributed to; this can include articles published in recognised journals, in-house publications, conference and seminar presentations, and any other contribution to industry, national and international bodies.

You are then asked to provide evidence of your competence mapped to the Standard of Professional Competence & Commitment (UK CSC SPCC). Using the STAR model will also prove beneficial here.

Finally, you will also be asked to provide referees; professionals who are familiar with your technical knowledge and work-based experience.

Once your application has been approved you will be invited to attend an interview (professional discussion), which takes place remotely and lasts for approx. one hour.

The interview will be conducted by an Assessor holding a professional title of at least the level being assessed.

(Security Testing only; you must have completed an appropriate exam within the last three years – see below).

Final Assessment

Following the application, examination and interview, a Final Assessment review will take place before Professional Registration can be awarded. The Final Assessment Assessors are responsible for holistically reviewing all the evidence from each stage and will take recommendations from assessors and interviewers as necessary. 

Use our resources

Our blog contains informative articles on how to ensure your application meets their criteria. We have also created videos interviewing successful registrants giving valuable insights into how they approached their application. We explain the STAR method, and we host all the contextualised standards you will need to read. Do become familiar with everything we offer on this website - it will make your job easier as you go through your application.

What good looks like...

  • Clearly structure your evidence and map it directly to the SPCC competence criteria.
  • Referees can support you; we advise you share your application with them for feedback before submission.
  • Focus evidence on what you have done and certifications you hold, not a future aspirational version of yourself.
  • Back up competence evidence with explanations on how the task was carried out, rather than simply detailing what was done.
  • Demonstrate how your subject matter expertise influences clients and stakeholders over time.
  • Understand the expectations for your level; read both the SPCC and the contextualised standard for your specialism.
  • If you are asked to re-submit, this as an opportunity to strengthen your application with more detailed examples.
  • Applying too high may end in disappointment; apply for the title you are confident of attaining and can provide evidence for.
  • This is Professional Registration. Your application reflects your professional identity; treat it with care and make the appropriate effort with your application.

Don't be 'that person'

Our assessors can tell if you haven't spent enough time on your application, have used AI to plagiarise someone else's words, or you are relying on evidence that you can't back up when asked. You may be asked to start again, or to attend an interview - or even have your application rejected outright. Read on to discover 'what bad looks like' - and ensure you avoid the pitfalls.

What 'bad' looks like...

  • Providing insufficient evidence to support the competencies required for the professional title applied for.
  • Giving generic, vague, or subjective statements without specific, viable examples.
  • Missing detailed evidence across all competency areas; relying too heavily on certifications.
  • Providing a sparse application; we have found that applications using less than 250 words per section are more likely to be sent back.
  • Presenting as a modestly experienced practitioner, rather than a subject matter expert when applying for the highest titles.
  • No clear demonstration of wider cyber security knowledge beyond the specialism applied for.
  • Failure to show breadth of experience outside the scope of your current role, or application of strategy.
  • Application gives a narrow view of role and capabilities, with little or no interdisciplinary awareness.
  • Not using STAR; the lack of structured, outcome-driven evidence weakens your application and makes the assessor’s job harder.
  • Missing evidence for community contributions or broader professional engagement.
  • Over-reliance on subjective language (e.g., “I believe,” “I feel”) without measurable impact or verification.
  • Missing the opportunity to demonstrate alignment with the SPCC.
  • Lacking self-awareness about the professional level being applied for.

Security Testing specialism only

Depending on which category of chartership you are applying for, different exams map to the required skill level. The CHECK Scheme examination standard has been mapped against the UK Cyber Security Council Standard for Professional Competence and Commitment (UKCSC SPCC) and approved as a means of testing technical knowledge requirements.

For registrants applying through The Cyber Scheme, this means:

  • For Chartered Title, applicants are required to pass or hold a qualifying certificate – The Cyber Scheme’s CSTL exam (App or Inf) or Cyber Scheme Red Team Manager (CSRTM) exam, and be able to demonstrate significant delivery experience at Team Leader level to proceed with their application. Note: We recognise equivalent exams from other organisations where they are recognised by the Council.
  • For Principal Title applications, registrants are required to pass or hold The Cyber Scheme’s CSTL exam (App or Inf), or equivalent exams from other organisations. 
  • For Practitioner Title applications, registrants are required to pass or hold The Cyber Scheme’s CSTM exam, or equivalent exams from other organisations. 
  • The Associate Title is not specialism-specific but can be the first step on the ladder to Practitioner in Security Testing. Please click here for further details.

Existing CTM and CTL certificate holders

Please be aware that for Security Testing specialism, you must hold a valid certificate (CSTM/CSTL or equivalent) at the point of submission of your professional title application form. We recommend that you have at least 6 months left on your certificate at this point of submission.