Aussie CREST exams could open by November

Powered by SC Magazine
 

Exams hosted in Canberra, AusCERT hears.

The Council of Registered Security Testers (CREST) could begin certifying web application penetration testers in Australia and New Zealand for the first time by November.

SC Magazine broke news of the formation of the Australian and New Zealand chapters of CREST when it launched in March this year.

Originally formed in Britain, the certification requires testers and penetration testing organisations to pass a number of gruelling penetration exams, paying thousands for the privilege.

In return, CREST chapters on both sides of the Tasman promise to promote certified professionals to the country's largest and wealthiest corporations as the best in the business, able to seek out every nook and cranny that hackers might use to steal sensitive data and cause chaos.

The November timeline for availability of the Web Application Certification Examination track – one of a number available – was aspirational only and formal deadlines are yet to be set, CREST board members told a small gathering at AusCERT 2012.

Australian candidates initially need to attend a lab in Canberra to take the tests. Examinations can be taken later in each capital city via a secure link to Canberra.

Pen testing organisations are accredited initially through self-assessment, however both chapters considered having Australia firms audit New Zealand counterparts and vice versa.

Universities have also been invited to offer penetration testing training for the certifications. The chapters noted such training courses need to be supplemented with around six years' experience in penetration testing and would not be "crash courses and boot camps".

Many other aspects of CREST are also not yet set in stone. It was too early, for example, to consider including forensics within CREST (a forensics module exists in the UK model) nor have the groups established a pricing model.

However CREST in Australia and New Zealand would resemble the British model as much as possible under a collective objective to create a "global certification".

CREST Australia representatives at the AusCERT meeting included Richard Byfield from DataCom TSS and Wade Alcorn from NGS Secure, while New Zealand was represented by New Zealand Internet Task Force chair Paul McKitrick.

Copyright © SC Magazine, Australia


Aussie CREST exams could open by November
 
 
 
Top Stories
Photos: Global Switch opens Sydney East data centre
First stage opened, to some fanfare.
 
ATO releases long-awaited Bitcoin guidance
Everyday investors escape the tax man.
 
Why the Weather Bureau’s new supercomputer is a 'gamechanger'
IT transformation starts to reap results.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  68%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  12%
 
Denial of service attacks
  7%
 
Insider threats
  11%
TOTAL VOTES: 489

Vote