CREST CPSA
CREST Practitioner Security Analyst
CREST Practitioner Security Analyst
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Exam format
Multiple-choice, 2 hours, proctored. Entry level for penetration testing.
30-day wait typical. Practical components may require longer waits.
› Recertification
Valid for 3 years. Renewal through proof of current employment at a CREST-accredited company.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 1 domain this cert is centrally about. Passing the exam demonstrates working knowledge of each.
› Prerequisites
No formal prerequisites. Recommended: Basic knowledge in network and web security.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.