Technology
Cloud Engineering
The Cloud Engineering standard recognises people who can build infrastructure that survives contact with real traffic, real budgets and real failure.
GCE-035 levels
View the standard →
The Cyber Security standard certifies people who can find weaknesses before an attacker does, and hold a response together when something gets through. Assessment includes incident evidence from your own work, not multiple-choice theory.
Each area is evidenced from your own work. Assessors look for what you decided and why, not for a rehearsed answer.
The same six-level framework, expressed in the terms of this discipline. Experienced applicants can enter directly at a higher level through the portfolio route.
| Level | Post-nominal | What it certifies | Professional Experience | Annual CPD |
|---|---|---|---|---|
| 1BIPS Foundation | BIPS-F | Understands the threat landscape, core controls and why each one exists. | 0–1 yr | 10 h |
| 2BIPS Practitioner | BIPS-P | Runs assessments and hardening work under the direction of a senior practitioner. | 1–3 yrs | 15 h |
| 3BIPS Professional | BIPS-Pro | Owns the security of a system or domain and answers for its exposure. | 3–6 yrs | 20 h |
| 4BIPS Specialist | BIPS-S | Leads a specialism — offensive testing, forensics, cloud security — with reviewed evidence. | 6–10 yrs | 25 h |
| 5BIPS Expert | BIPS-E | Sets security strategy and is trusted on risk at executive level. | 10+ yrs | 30 h |
| 6BIPS Fellow | FBIPS | Contributes to the profession through standards, research or public defence work. | By election | 30 h |
You submit real work against the six capability areas.
An assessor checks provenance and your role in it.
A recorded conversation about decisions and trade-offs.
Your credential is issued and listed publicly.
Builds and hardens the controls that hold the line.
Runs containment and recovery when something gets through.
Finds it first, on purpose, and writes it up properly.
Owns organisational risk and answers for it.
Demand for verified security capability is outpacing every other field.
Level 3 and above now require a documented response you led.
Automated tooling on both sides of the fence.
The Cloud Engineering standard recognises people who can build infrastructure that survives contact with real traffic, real budgets and real failure.
The DevOps & Reliability standard recognises people who shorten the distance between an idea and production while making outages rarer and shorter.
The Artificial Intelligence standard recognises people who can take a model from problem framing to production and stay accountable for what it does once it is there.