CREST CRTSA
CREST Registered Technical Security Architect
CREST Registered Technical Security Architect
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Built for these roles
› Exam format
Written exam + interview. Focus on security architecture.
30-day wait typical. Practical components may require longer waits.
› Recertification
Valid for 3 years. Renewal through CPD evidence.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 2 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
Reference architectures, control frameworks (NIST SP 800-53, CIS Controls), secure-by-design patterns, threat modeling, trust-boundary design, technology standards.
Zero trust principles, micro-segmentation, NIST SP 800-207, ZTNA, continuous verification, BeyondCorp.
› Prerequisites
Several years of experience in security architecture. CREST membership recommended.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.