Certification Overview
The CREST Registered Technical Security Architect Examination (CRTSA) tests candidates’ knowledge and expertise in a common set of core skills and knowledge for systems architects. In preparation for the role of Technical Security Architect, it is important that candidates understand its purpose which can typically be summarised as driving beneficial security change into a business through the development or review of architectures so that they:
- Fit the business requirements for security
- Mitigate the risks and conform to relevant security policies
- Balance information risk against the cost of countermeasures
The exam is aimed at individuals seeking to align themselves with the role of a Senior Security Architect and looking to achieve CCP Architect certification. Successful candidates will have a strong technical ability aligned with experience to recommend high level solutions. The exam assumes that without adequate technical understanding it is not possible to perform a satisfactory and meaningful risk assessment of the implications of a particular architecture. Success will confer CREST Registered status to the individual.
Candidates should be able to:
- Design and implement secure IS architectures
- Understand the responsibilities of a Security Architect
- Identify information risks that arise from potential solution architectures
- Design alternate solutions to mitigate identified information risks
- Ensure that alternate solutions or countermeasures mitigate identified information risks
- Apply ‘standard’ security techniques and architectures to mitigate security risks
- Develop new architectures that mitigate the risks posed by new technologies and business practices
- Provide consultancy and advice to customers on intrusion analysis and architectural problems
- Supervise Security Architects reporting to them and understand the difficulties that they may face
Examination Format
The examination is assessed in both Written Multiple Choice and Written Long Form (scenario). The multiple choice section measures breadth of technical knowledge; the scenario paper focuses on design and analysis skills.
