Public recognition framework
What each designation means
Implementation or product
An evidenced product, process, service or institutional implementation that satisfies every applicable mandatory clause within a stated scope. OSPCRM organizational conformance follows clause 11.1; product compatibility follows clause 11.2.
Threshold: 100% applicable mandatory requirements evidenced and passed; zero unresolved critical failures. Self-declarations and independently assessed findings are described separately.
Qualified professional
A candidate who meets the published entry requirements and passes the PASC certification examination at an accredited examination partner.
Threshold: validated Security+ equivalent skills; ethical hacking practical; ≥85% examination theory, practice and predictive modelling; ≥80% each critical domain; all safety controls passed.
Operational organization
A provider that demonstrates full standard implementation in its declared business lines, services, operating processes, training and delivery capabilities.
Threshold: ISO-level prequalification, 100% applicable mandatory controls, no unresolved major or critical findings, two operational quality cycles and witnessed service delivery across all declared lines.
Institutional eligibility gate
Effective ISO-level implementation is mandatory before assessment.
Applicants demonstrate that applicable ISO-level management, technical, operational and assurance controls function in the declared scope. A certificate may substantiate the submission; the eligibility decision rests on observed implementation and effectiveness.
Minimum gate: all applicable baseline controls mapped to owners and evidence; one complete operational review cycle; zero unresolved critical control failures; accounted-for material findings.
The PASC substantive audit follows as a separate phase, examining scheme-specific performance, methodology, field work, decision controls and repeatable competence.
Institutional lifecycle
From eligibility to recognition
Declare scope and recognition type
Define the assessed subject, applicable standard, legal entity or person, services, sites and operating boundaries.
Demonstrate baseline eligibility
Establish functioning and effective ISO-level controls before a substantive accreditation assessment.
Perform PASC-specific examination or assessment
Professional candidates complete partner-administered exams. Organizations demonstrate complete operational implementation. Conformity evidence is examined in the defined product, work or service scope.
Complete independent decision and registration
Record authorized outcomes, scope, conditions, effective dates and applicable surveillance. Only consent-cleared public fields appear in the registry.
Each verified claim must be read within its published subject, scope, standard, status and validity period.
Verify a record → · Machine-readable thresholds (JSON) → · Assessment and appeals →