Security News > 2020 > August > CREST cancels two UK infosec accreditation exams after fresh round of 'cheat sheets' are leaked online

British infosec accreditation body CREST has suspended all of its accreditation exams after The Register revealed a published cache of files including what appeared to be internal exam sheets as well as docs apparently tied to key industry player NCC Group.

We understand from sources that the security body has suspended all of its CREST Certified Infrastructure Tester and CREST Certified Web Application Tester exams for up to a month while their contents are reviewed.

The move fuels industry speculation that leaked exam docs contained up-to-date material intended to help candidates pass tests rather than learn and understand the course content.

Hosted on Dropbox, The Reg understands the files within seemed to contain detailed information about certification exams, as well as emails to and from named people, including what appeared to be senior personnel from within NCC. The Register has asked NCC Group to comment upon the Dropbox folder's contents and their implications.

A CREST spokeswoman declined to comment on the exam cancellation at time of publication.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/08/17/crest_halts_infosec_exams/