Entry requirements
Technical competence before specialization.
Admission requires proven cybersecurity foundations comparable to CompTIA Security+, practical ethical-hacking competence supported by recognized certification or tested equivalents, and successful completion of safety and authorization checks.
Equivalence gate: ≥85% on the security foundations test and ≥85% on the supervised ethical-hacking exercise, with full compliance with authorized scope and safety requirements.
The practitioner then progresses to active OSPCRM scenarios, predictive threat modelling, exploitation chains, attack adaptation and independently reviewed risk decisions.
Programme architecture
Twelve connected learning modules
| Modules | Applied outcomes |
|---|---|
| 01–03 | OSPCRM risk classification; rules of engagement; identity and network exploitation |
| 04–06 | Cloud, container and API attacks; adversarial adaptation; predictive risk modelling |
| 07–09 | Independent remediation verification; AI and agentic systems; quantum cryptographic transition |
| 10–12 | Sovereign dependencies; executive-grade evidence; adversarial capstone qualification |
Advanced qualification
Measured and witnessed practical performance
| Examination component | Minimum threshold |
|---|---|
| Technical methodology and theory | 85% |
| Active multi-stage practical scenarios | 85% |
| Predictive model and validation | 85% |
| Every critical competence domain | 80% |
| Mandatory evidence and authorization gates | 100%, zero critical breaches |
| Held-out evaluation dataset | FNR ≤10%; P0 precision ≥90% |
Four distinct multi-stage scenario families are required. Training and examination cases are separate, with independent examiner decisions at accredited examination partners.
AI assurance and the quantum cryptographic transition directive are integrated into the advanced syllabus. Provider accreditation is a separate organizational assessment covering trainers, laboratories, service operations, examinations, governance and quality assurance.