DCC gains membership to globally recognised security body

The Council of Registered Ethical Security Testers, known as CREST, is the standard in internationally recognised certifications and accreditations for cybersecurity professionals and organisations.

In order to gain exclusive membership to CREST, the DCC needed to satisfy intense scrutiny of expertise, experience, and adherence to industry best practices in cybersecurity. This included demonstrating proficiency in areas such as ethics, incident response, threat intelligence, and security operations. We also took part in assessments to ensure compliance with CREST's standards and requirements.

Globally, there are fewer than 50 Managed Security Service Providers (MSSP) companies that hold the SOC accreditation and fewer than 10 internal security teams, such as the Smart DCC Security Operations Centre, that have the certificate. Companies like Accenture, PWC, NCC and Nettitude, are some peer members in the group.

Derren Stephenson, Head of Security Operations, for DCC, said:

“CREST SOC accreditation demonstrates our rigorous processes, backed up with clear, up to date documentation. Our partners in the industry can have confidence that we do the right thing, at the right time, in the right way, whilst acting with integrity and being accountable, delivering a world-class professional security operations centre.”

Rowland Johnson, President of CREST commented:

“We are delighted to welcome the DCC as a CREST member company. An effective SOC plays a critical role in underpinning incident detection and response capabilities in the face of increasingly sophisticated cyber-attacks. The DCC now has external validation that its SOC meets rigorous global standards.”

The accreditation lasts for one year, with an annual recertification review towards the end of the first year to maintain the accreditation and the right to display the certificate and CREST logos.