Aussie CREST exams could open by November

By on
Aussie CREST exams could open by November

Exams hosted in Canberra, AusCERT hears.

The Council of Registered Security Testers (CREST) could begin certifying web application penetration testers in Australia and New Zealand for the first time by November.

SC Magazine broke news of the formation of the Australian and New Zealand chapters of CREST when it launched in March this year.

Originally formed in Britain, the certification requires testers and penetration testing organisations to pass a number of gruelling penetration exams, paying thousands for the privilege.

In return, CREST chapters on both sides of the Tasman promise to promote certified professionals to the country's largest and wealthiest corporations as the best in the business, able to seek out every nook and cranny that hackers might use to steal sensitive data and cause chaos.

The November timeline for availability of the Web Application Certification Examination track – one of a number available – was aspirational only and formal deadlines are yet to be set, CREST board members told a small gathering at AusCERT 2012.

Australian candidates initially need to attend a lab in Canberra to take the tests. Examinations can be taken later in each capital city via a secure link to Canberra.

Pen testing organisations are accredited initially through self-assessment, however both chapters considered having Australia firms audit New Zealand counterparts and vice versa.

Universities have also been invited to offer penetration testing training for the certifications. The chapters noted such training courses need to be supplemented with around six years' experience in penetration testing and would not be "crash courses and boot camps".

Many other aspects of CREST are also not yet set in stone. It was too early, for example, to consider including forensics within CREST (a forensics module exists in the UK model) nor have the groups established a pricing model.

However CREST in Australia and New Zealand would resemble the British model as much as possible under a collective objective to create a "global certification".

CREST Australia representatives at the AusCERT meeting included Richard Byfield from DataCom TSS and Wade Alcorn from NGS Secure, while New Zealand was represented by New Zealand Internet Task Force chair Paul McKitrick.

Copyright © SC Magazine, Australia

Tags:

Most Read Articles

You must be a registered member of iTnews to post a comment.
| Register

Poll

How should the costs of Australia's piracy scheme be split?
Rights holders should foot the whole bill
50/50
ISPs should foot the whole bill
Government should chip in a bit
Other
Flash is heading towards its grave, and that's...
Great! Good riddance
Sad! Flash had some good qualities
Irrelevant. I don't care
What's Flash?
View poll archive

Whitepapers from our sponsors

What will the stadium of the future look like?
What will the stadium of the future look like?
New technology adoption is pushing enterprise networks to breaking point
New technology adoption is pushing enterprise networks to breaking point
Gartner names IBM a 'Leader' for Disaster Recovery as a Service
Gartner names IBM a 'Leader' for Disaster Recovery as a Service
The next era of business continuity: Are you ready for an always-on world?
The next era of business continuity: Are you ready for an always-on world?

Log In

Username:
Password:
|  Forgot your password?