#PRESS RELEASE#
London 25th September 2007
Subject: First Tiger Scheme Assessments
Today saw the first Senior Tester assessments carried out under the Tiger Scheme for penetration testers.
Three candidates sat a practical exam set by the Scheme Examining Body, the University of Glamorgan, and were then interviewed under exam conditions to discuss their findings. All three found the assessment a challenge.
Campbell Murray, Technical Director at encription ltd., said "This is without doubt the most rigorous certification I have sat. Professionally run under strict University examination conditions I was highly impressed by the extent to which this practical examination verifies the in depth technical knowledge of the penetration testing consultant. The interview element thoroughly validates the tester's ability to communicate in a meaningful way, adding further value".
Daniel Boorman of KPMG agreed, saying: "Having sat the course I was impressed with the technical depth of the assessments as well as the professional manner in which the course was run,.... It's certainly a good benchmark of an individual's ability to perform detailed technical security assessments".
The Senior Tester qualification is the premier qualification under the Tiger Scheme. Dr Andrew Blyth of the Tiger Scheme Examining Body, was pleased with the results, saying "This is a validation of the months of effort and care that has been put into designing and constructing the assessment itself, and the test environment. It's very satisfying to be able to declare the Tiger Scheme open for business".
The Senior Tester qualification will be supported by a Qualified Tester assessment, due to be trialled later this month, consisting of a three day course and a multiple choice examination.
The Tiger Scheme is an independently run framework for certifying the abilities of penetration testers at associate, qualified and senior levels. It provides a flexible approach that can accommodate inhouse teams in industry and elsewhere, as well as certifying consultants in commercial penetration testing companies. Supporting processes such as secure handling of client material can be assessed via the CSIA Claims Tested Mark Scheme (www.cctmark.gov.uk), successful certification being recognized as a company-wide qualification under Tiger.
The scheme is run by an Independent Management Committee which comprises representatives from the Private and Public sectors.
The Tiger Scheme name is derived from the early days of penetration testing led by "Tiger Teams".
For further information see: www.tigerscheme.org
ENDS.
Notes to Editors:
For interviews or additional information contact:
Peter Fischer
Secretariat
Tiger Scheme
PO Box 60244
London, EC1P 1GD
secretariat@tigerscheme.org