Top of CREST's Incident Response track (CPIA → CRIA → CCIM). Tests broad incident-management knowledge and hands-on IR tasks. Fee not published; delivered in two parts, Part 2 within 3 months of Part 1.
Issuer
CREST
Industry
Cybersecurity
Domain
Security Operations
Level
Expert
Exam fee
$2,144 — July 2024 roadmap snapshot, unverified
Prerequisites & eligibility
No formal prerequisites are published; anyone can register for the exam.
Renewal & maintenance
Valid for 3 years. Renew by exam.
Most CREST examinations are valid for 3 years and then must be retaken.
Recognition
CREST Certified-level incident response exam; used by the UK NCSC CIR scheme and CREST-accredited IR companies.
Related certifications
C-ADPenX The SecOps Group Certified Active Directory Pentesting eXpert
CAWFE IACIS Certified Advanced Windows Forensic Examiner
CBTeamerX The SecOps Group Certified Blue Teamer - eXpert