- Professional Standards
PROFESSIONAL REGISTRATION
As an organisation which has been granted Royal Chartered Status, the UK Cyber Security Council now has the power to set industry standards and award professional titles for those working in the cyber profession. The resulting Standard for Professional Competence and Commitment provides certainty around the skills and competences of the workforce, creating a clear route into, and progression through, the profession. Read more about how this came about below.
A: KNOWLEDGE, UNDERSTANDING AND EXPERIENCE
B: COMMUNICATION AND INTERPERSONAL SKILLS
C: COLLABORATIVE MANAGEMENT, LEADERSHIP AND MENTORING
D: INTEGRITY
E: PERSONAL COMMITMENT
There are four professional registration titles aligned to the Council’s professional standard.
Associate (ACSP) – Building knowledge, skills and experience.
Practitioner (PraCSP) – Applying expertise independently and effectively.
Principal (PriCSP) – Leading teams, projects and specialist practice.
Chartered (ChCSP) – Influencing organisations, standards and the wider profession.
Read more on each title below.
An Associate Cyber Security Professional will be able to demonstrate competence and commitment in all areas outlined in the SPCC, and provide appropriate evidence.
Associate is typically the starting point for those entering or establishing themselves within the profession. It is aimed at individuals who can demonstrate cyber security knowledge, practical experience and professional behaviours, but who are still developing their expertise and are likely to be working under supervision or guidance.
You may be suited to Associate if you are:
• Starting your cyber security career
• Completing an apprenticeship, degree or graduate programme
• Transitioning into cyber security from another profession
• Working in a junior cyber security role
• Building practical experience and professional competence
At this level, the emphasis is on demonstrating potential, foundational competence and a commitment to ongoing professional development.
A Practitioner Cyber Security Professional will be able to demonstrate competence and commitment in all the areas outlined in the SPCC and provide appropriate evidence.
Practitioner is for established professionals whose cyber security expertise is actively applied within their role. Practitioners are expected to work independently, solve problems, contribute to organisational improvements and communicate effectively with both technical and non-technical audiences.
You may be suited to Practitioner if you:
• Deliver cyber security activities independently
• Apply your expertise to solve business or technical challenges
• Contribute to improving cyber security within your organisation
• Supervise activities, projects or colleagues
• Are relied upon for your professional judgement and technical knowledge
At this level, you are recognised as a competent and effective cyber security professional whose expertise contributes directly to organisational outcomes.
A Principal Cyber Security Professional will be able to demonstrate competence and commitment in all the areas outlined in the SPCC and provide appropriate evidence.
Principal is for senior professionals who are recognised experts within their chosen specialism. Their influence extends beyond their own work and includes leadership, mentoring, management and strategic contribution. Principals are often the people others turn to for advice and guidance.
You may be suited to Principal if you:
• Lead teams, programmes or major projects
• Manage people, budgets or resources
• Mentor and develop other professionals
• Are recognised as an expert in your specialist area
• Influence organisational decision-making and cyber security strategy
At this level, your expertise is not only applied in practice but also helps shape how cyber security is delivered by others.
A Chartered Cyber Security Professional will be able to demonstrate competence and commitment in all the areas outlined in the SPCC and provide appropriate evidence.
Chartered is the highest level of professional registration. It is intended for individuals who have significant experience and influence across the cyber security profession. Chartered professionals combine deep expertise with leadership, strategic impact and a demonstrable contribution to the advancement of the profession itself.
You may be suited to Chartered if you:
• Influence strategy at organisational, sector or national level
• Lead complex initiatives across multiple areas of cyber security
• Shape policy, standards, frameworks or professional practice
• Act as a recognised authority in your field
• Contribute to developing the wider profession through leadership, mentoring, research or thought leadership
At this level, your influence extends beyond your organisation and contributes to the development and reputation of the cyber security profession as a whole.
The Cyber Scheme was approved as a Licensed Body in 2023, allowing us to assess and recommend individuals for Professional Titles. We are currently assessing registrations for the Security Testing, Incident Response and Secure Operations specialisms and the non-specialism specific Associate Title. More will follow as they are developed by the Council.
JUST BEGINNING YOUR CAREER?
Chartership: the background and where we are now
Royal Charters, granted by the Sovereign on the advice of the Privy Council, have a history dating back to the 13th century. Why are they so relevant today?
Professional Standards & Chartership
The Council has been created to provide increased confidence in the professional standing of individuals offering Cyber Security consultancy.
"The Cyber Scheme has worked with the National Technical Authority (CESG/NCSC) for Information and Cyber Security for several years. The business case for establishing an independent body to oversee the Cyber Security profession is welcome recognition of the scale of the challenge at a national level across all sectors and roles within the economy and society more widely. "
Want to learn more about the Council’s role in professional registration? Please click here to be taken to The Council’s website.