Realize Security CREST Accreditation
What is CREST Accreditation?
CREST, in their own words, is an "an international not-for-profit, membership body" which provides accreditation for cyber security service providers. This accreditation attests to standards of service quality and information security within these organisations. Membership of CREST provides assurance to organisations commissioning these services that the service provider will both deliver a quality service and protect the sensitive information of the client organisation. Accreditation also implies that the service provider complies with ethical and legal standards as part of service delivery.
Why is this important?
Whether or not CREST accreditation is important for a given organisation really depends on the organisation. For some it can be simply an assurance of quality, being able to select a provider from whom there is a third-party assurance for quality and integrity. For others, use of a CREST accredited service provider may be a requirement set out by internal or external governance or compliance bodies.
Which of Realize Security's services are covered by CREST accreditation?
Realize Security's services align, almost exclusively, within CREST's 'Penetration Testing' category. This means that, to date, almost all services listed on the website are covered. One exception is standalone vulnerability assessment (vulnerability scanning). This is categorised separately by CREST. However, unless explicitly required, we do not typically provide this service without manual verification and penetration testing of identified issues.
What about red teaming?
Whilst we offer a limited and growing red teaming capability, this capability is not CREST accredited.
Are CREST services more expensive?
No. Realize Security charges a flat rate across our standard range of service. Some specialist services may carry extra costs, but are still highly competitive compared to other providers.
What kinds of companies do you work with?
We've yet to meet a type of company we can't work with. High street banks, fintech, heavy industry and education. You name it, we have a solution.
Why Realize Security?
Realize Security was established to provide information security assurance services tailored to client requirements. We also place a heavy focus on effectively augmenting our service with automation and selective use of AI. On top of that, our service is smaller, more adaptable and more agile than our larger competitors. As a result we are better able to adjust our delivery and reporting to our client's needs, at no extra cost. All whilst maintaining the same standards or testing efficacy and reporting standards. The same grade and experience of consultants are readily available at other providers at a higher cost and lower flexibility.
Sounds great! How do we get started?
Easy peasy. Pop on over to our contact page using the button below. If you'd prefer, check us out on LinkedIn.