Member

However, I sound one note of caution: we must not replace one form of box-ticking with another. A certificate can be good evidence of capability, but it is not the capability itself. There are highly experienced cyber professionals who may not hold a particular qualification. Ultimately, what matters is whether an organisation has the people, skills and necessary capability to protect its systems—not whether it can tick a box saying that somebody has the right certificate.