20%
GOVCybersecurity Governance
align security roles, policy, risk appetite and oversight with organisational objectives
Certified Cybersecurity Governance & Risk Specialist
Professional assessment of cybersecurity governance, risk treatment, control assurance, identity and access, incident response, resilience and security ethics.
Cybersecurity & IT
What this certification validates
Assesses cybersecurity governance and risk competence including governance, risk treatment, security controls, identity and access management, incident response, resilience and professional ethics.
Official certification titles, live examinations, practical-assessment records, scoring and certification decisions are controlled in English. Arabic and French pages are explanatory translations.
Scheme statusApplications open
Credential codeCCGRS
Scheme version1.0
Validity36 months
01
Who this certification is for
These are example professional profiles; final eligibility is determined by the active scheme requirements.
Cybersecurity governance specialistsInformation-security and risk professionalsGRC analystsIT control and assurance professionalsManagers responsible for cyber risk and resilience
02
Eligibility & evidence
Route A: relevant qualification + professional experience · Route B: professional experience · Route C: portfolio / evidence route. The active scheme determines which routes are available and what evidence is sufficient.
Required / supporting evidence
✓Government identity / passport
✓CV / Résumé
✓Education / professional-development evidence
✓Professional experience evidence
✓Portfolio / project evidence
03
Competency domains
Assessment is distributed across the following competency domains according to the scheme weighting.
20%
RISKCyber Risk Assessment & Treatment
identify, analyse, prioritise and treat cyber risks using defined criteria
20%
CTRLSecurity Controls & Assurance
select, implement and test proportionate preventive, detective and corrective controls
15%
IAMIdentity & Access Management
apply identity lifecycle, least privilege and privileged-access controls
15%
IRIncident Response & Resilience
detect, contain, recover and learn from security events using controlled response plans
10%
ETHSecurity Ethics & Professional Conduct
protect confidentiality, act within authority and report material concerns
04
Assessment structure
Certification depends on eligibility and successful completion of all required assessment components, not payment or course attendance alone.
Knowledge examination
Component pass: ≥ 65%
Practical assessment
Component pass: ≥ 70%
Professional judgment & ethics
Component pass: ≥ 70%
Overall certification threshold
≥ 70%
Exam questions60
Exam duration90 min
Maximum exam attempts3
05
Assessment standard & quality controls
The same exam rules apply to all candidates while question forms are assembled randomly from the controlled blueprint and published competency domains.
✓
Approved active items are mapped to competency domains and difficulty, with selection weighted to the scheme domains.
↻
Every attempt is randomised; the system does not rely on a fixed 20-question form that can simply be memorised.
◎
Pass thresholds: knowledge 65%, ethics 70%, practical 70% and weighted overall 70%, with every required component passed.
⚖
The UKG model operates through defined certification schemes, impartiality controls, documented assessment and an independently governed, auditable certification decision.
06
Your route from application to credential
One clear route from registration through credential issue and online verification.
- 01
Choose & register
Review scope, fee and application status, then start from the official certification page.
- 02
Account & identity
Complete the candidate account, legal identity and contact details in the secure portal.
- 03
Eligibility & evidence
Upload CV, experience, qualifications or portfolio evidence under the applicable eligibility route.
- 04
Application & payment
Once the application can proceed, the fee and controlled assessment access are handled.
- 05
Knowledge & ethics
Complete the controlled examination mapped to the active blueprint and competency domains.
- 06
Practical assessment
Complete a practical case or work product scored against a controlled rubric.
- 07
Certification decision
When all components and thresholds are complete, the case enters the controlled certification-decision stage; exceptions are routed to authorised review.
- 08
Issue & verification
After a Certified decision, the credential and supporting documents are issued and linked to live verification.
07
What successful candidates receive
Professional Certificate
A4 credential with unique ID, issue/expiry dates, status and QR verification.
Competency Transcript
Controlled record of competency domains and assessment component outcomes.
Verification Letter
Formal confirmation of the credential and current online status.
Assessment Summary
Summary of assessment method, thresholds and recorded result.
Scheme Summary
Scope, competency model, validity, maintenance and recertification rules.
Professional Evidence Pack
Supporting documents linking the candidate, application, assessment and credential.
Application & assessment feeGBP 169.00
The published fee covers the UKG application and eligibility workflow, controlled examination access, practical assessment, certification-decision workflow and the standard digital credential document set if the candidate is certified. Taxes, retakes or exceptional third-party verification may be charged separately where applicable.
Apply for this certification
Start with the basic details below, then complete identity and evidence securely in the candidate portal.
Validity, maintenance & recertification
Standard validity is 36 months. Maintenance and recertification follow the scheme requirements and credential lifecycle status.
Verification & professional use
Every issued credential carries a unique credential ID and live verification record. The current online status is the authoritative reference.
Verifiable professional value
A UKG credential records successful completion of a defined professional certification scheme and presents the competencies assessed and current credential status. Each receiving organisation determines how it will use or recognise the credential under its own requirements.