CERTIFICATION PROGRAM
หลักสูตรรับรองที่เปิดให้สอบ
รายชื่อหลักสูตรและข้อสอบรับรองมาตรฐานระดับอาชีพที่เปิดให้สมัครสอบ ข้อมูลหลักสูตรซิงค์จากระบบ Ace Exam โดยตรง
ทั้งหมด 17 หลักสูตร
Certificate of Completion in IT Third Party Risk Management (COC-IT-TPRM)
This assessment is designed to measure the knowledge, critical thinking, and decision-making skills of managers, auditors, and professionals involved in Third-Party Risk Management (TPRM). It evaluates competencies across the entire lifecycle, ranging from risk assessment and contracting to ongoing monitoring, incident handling, and contract termination.
Certified Customer Onboarding & KYC Professional (CCKP)
The Certified Customer Onboarding & KYC Professional (CCKP) certification validates the knowledge and practical competencies required to design, implement, operate, and oversee secure, compliant, and risk-based customer onboarding and Know Your Customer (KYC) processes within regulated financial institutions, digital asset businesses, fintech organizations, payment service providers, and other regulated entities. The certification focuses on the complete customer onboarding lifecycle, including customer acceptance, identity verification, electronic Know Your Customer (eKYC), Customer Due Diligence (CDD), Enhanced Due Diligence (EDD), sanctions and politically exposed persons (PEP) screening, adverse media review, anti-money laundering (AML) risk assessment, customer risk classification, suitability assessment, regulatory compliance, and ongoing customer information management. CCKP emphasizes the application of international best practices and regulatory expectations to ensure organizations establish effective customer onboarding controls, mitigate financial crime risks, strengthen regulatory compliance, and enhance customer trust while maintaining operational efficiency. Successful candidates demonstrate the ability to evaluate customer onboarding processes, identify compliance gaps, implement risk-based controls, and support governance frameworks aligned with industry standards and regulatory requirements.
Certified Cybersecurity Foundation (CCF)
The Certified Cybersecurity Foundation (CCF) certification validates foundational knowledge and practical understanding of cybersecurity concepts, threats, controls, and security best practices used in modern organizations. This certification is designed for individuals who want to build a strong cybersecurity foundation before advancing to specialized security domains such as SOC Operations, Penetration Testing, Governance, Risk Management, Cloud Security, or Security Auditing. The examination focuses on core cybersecurity principles including the CIA Triad, threat landscape, access control, network security, endpoint protection, secure authentication, incident response, security awareness, and cybersecurity governance fundamentals aligned with industry-recognized frameworks such as NIST Cybersecurity Framework (CSF), ISO/IEC 27001, and CIS Controls. The Certified Cybersecurity Foundation (CCF) certification demonstrates that candidates possess the essential knowledge required to identify common cyber threats, understand organizational security controls, and contribute to maintaining a secure digital environment.
Certified DPIA Lead Professional (CDLP)
The Certified DPIA Lead Professional (CDLP) certification validates advanced competency in planning, conducting, reviewing, and governing Data Protection Impact Assessments (DPIAs) for complex processing activities involving personal data. Certified professionals demonstrate the ability to evaluate high-risk processing operations, determine lawful processing grounds, assess necessity and proportionality, identify privacy risks, recommend effective mitigation measures, and integrate privacy by design and by default into organizational governance. The certification also validates expertise in auditing DPIA quality, managing stakeholder engagement, documenting regulatory evidence, evaluating cross-border processing, supporting compliance with GDPR and international privacy frameworks, and advising executive management on privacy risk decisions. Successful candidates are expected to lead enterprise-wide DPIA initiatives, oversee high-risk processing assessments, and provide independent assurance that privacy risks are effectively identified, evaluated, mitigated, and continuously monitored throughout the data lifecycle. The certification aligns with internationally recognized privacy principles and reflects the structure of modern DPIA practices described by the European Data Protection Board (EDPB).
Certified DPO Compliance Professional (CDPOC)
Certified DPO Compliance Professional (CDPOC) is a professional certification designed for individuals responsible for data protection, privacy governance, and compliance management. The certification validates practical knowledge in handling data privacy obligations, managing data breach incidents, conducting privacy risk assessments, and implementing compliance controls aligned with global data protection regulations and industry best practices.
Certified Incident Response Foundation (CIRF)
The Certified Incident Response Foundation (CIRF) certification validates a candidate's foundational knowledge of cybersecurity incident response principles, processes, and best practices. The certification is designed for individuals who want to understand how organizations prepare for, detect, analyze, respond to, and recover from cybersecurity incidents using industry-recognized guidance. The examination focuses on the fundamental concepts of incident response based on the NIST Cybersecurity Framework (CSF) 2.0, NIST SP 800-61 Rev. 2 (Computer Security Incident Handling Guide), and selected concepts from NIST SP 800-53 Rev. 5 and NIST SP 800-137. Candidates are expected to demonstrate an understanding of the incident response lifecycle, security monitoring, incident classification, reporting, documentation, and the roles and responsibilities of an Incident Response Team (IRT/CSIRT). The CIRF certification is intended for entry-level cybersecurity professionals, IT administrators, system administrators, network administrators, SOC analysts, help desk personnel, recent graduates, and anyone seeking to build a strong foundation in cybersecurity incident response before progressing to more advanced technical or leadership certifications.
Certified Information Security Essentials (CISE)
The Certified Information Security Essentials (CISE) certification validates foundational knowledge of information security principles, governance, risk management, security controls, and Information Security Management Systems (ISMS). The examination focuses on essential cybersecurity concepts and the core requirements of ISO/IEC 27001:2022, enabling candidates to understand how information security is established, implemented, maintained, and continually improved within an organization. The certification is designed for individuals seeking a strong foundation in information security and serves as an entry point for careers in cybersecurity, governance, risk, compliance, and information security management.
Certified Information Security Risk Manager (CISRM)
The Certified Information Security Risk Management (CISRM) Examination validates a candidate's ability to establish, assess, analyze, evaluate, treat, monitor, and continually improve information security risks in accordance with ISO/IEC 27005:2022 and its alignment with ISO/IEC 27001:2022. The examination measures practical competence in designing and operating an effective Information Security Risk Management process, applying risk scenarios, defining risk criteria, evaluating likelihood and impact, selecting appropriate risk treatment options, documenting risk decisions, and integrating risk management into an Information Security Management System (ISMS).
Certified NIST CSF Implementer (CNCI)
The Certified NIST CSF Implementer (CNCI) certification validates the candidate’s capability to implement, operationalize, and maintain cybersecurity controls and governance processes aligned with the NIST Cybersecurity Framework (CSF). This certification focuses on practical implementation, cybersecurity program development, risk treatment planning, policy alignment, control deployment, and continuous cybersecurity improvement activities.
Certified NIST Cybersecurity Framework Foundation (CNCF)
The Certified NIST Cybersecurity Framework Foundation (CNCF) certification validates fundamental knowledge and understanding of the NIST Cybersecurity Framework (CSF), including its core functions, governance concepts, cybersecurity risk management principles, and implementation approach within organizations. This certification is designed for individuals who are beginning their cybersecurity, IT governance, risk management, compliance, or information security journey and need a strong foundational understanding of the NIST CSF framework.
Certified SQL Foundation (CSQLF)
The Certified SQL Foundation (CSQLF) certification validates fundamental knowledge and practical skills in Structured Query Language (SQL) and relational database concepts. It is designed for individuals who are beginning their careers in software development, database administration, data analytics, business intelligence, and IT operations. This certification focuses on ANSI SQL (ISO/IEC 9075) principles, enabling candidates to work with multiple relational database management systems (RDBMS) including PostgreSQL, MySQL, Microsoft SQL Server, Oracle Database, and MariaDB.
Certified Secure Software Development Framework Expert (CSSDFE)
An advanced certification validating expert-level mastery of secure software development lifecycle frameworks, threat modeling, secure coding practices, DevSecOps automation, and software supply chain security. Candidates demonstrate the ability to design, implement, and govern a mature secure SDLC program aligned with NIST SSDF, ISO/IEC 27034, and OWASP SAMM.
Certified Securities IT Governance Foundation (CSIGF)
This certification validates foundational knowledge of Information Technology Governance, cybersecurity controls, and regulatory compliance requirements within securities and financial business environments. The examination focuses on core concepts related to IT governance structures, information security principles, data protection, access management, operational security, and business continuity based on SEC IT governance expectations and international best practices.
Certified Third-Party Risk Management Foundation (CTPRMF)
The Certified Third-Party Risk Management Foundation (CTPRM-F) Examination assesses candidates’ understanding of the governance and management of technology-related third-party risks. The examination covers risk-based classification, risk assessment, due diligence, third-party selection, contracting, information security requirements, ongoing monitoring, incident management, regulatory reporting, termination, and exit strategy. Candidates are expected to demonstrate their ability to apply third-party risk management principles throughout the entire third-party lifecycle and select appropriate controls based on the nature, criticality, and risk level of outsourced services, external system connections, and access to sensitive or customer information.
Certified Third-Party Risk Management Professional (CTPRM)
The Certified Third-Party Risk Management Professional (CTPRM) certification validates comprehensive competency in Third-Party Risk Management (TPRM), covering foundational principles through advanced enterprise-level governance, operational resilience, cybersecurity, outsourcing oversight, and strategic vendor risk management. This certification is designed as a single advanced-track certification that integrates knowledge across operational, technical, governance, compliance, audit, and executive risk management domains. The program emphasizes real-world implementation, risk-based decision making, lifecycle governance, cyber resilience, regulatory alignment, and evidence-based control assessment. The certification framework is aligned with internationally recognized practices and regulatory expectations related to IT outsourcing, supply chain security, operational resilience, cloud governance, and vendor risk management.
Certified Zero Trust Architecture Foundation (CZTAF)
The Certified Zero Trust Architecture Foundation (CZTAF) certification validates an individual's understanding of the Zero Trust security model as defined in NIST Special Publication 800-207. The certification covers Zero Trust principles, architecture components, policy enforcement, identity-centric security, continuous verification, secure access, and implementation considerations across enterprise environments, including on-premises, cloud, and hybrid infrastructures. Candidates who pass the examination demonstrate foundational knowledge of Zero Trust concepts, deployment models, trust algorithms, policy decision points, policy enforcement points, identity management, device security, network segmentation, continuous monitoring, and Zero Trust adoption strategies.
Organizational Cybersecurity Awareness Knowledge Assessment (FS-OCAC)
The Organizational Cybersecurity Awareness Knowledge Assessment (FS-OCAC), developed and administered by FortSecure Global, is designed to evaluate employees' foundational knowledge and understanding of cybersecurity threats, risks, and safe security practices in the workplace. The examination focuses on practical cybersecurity awareness, including recognizing phishing attempts, protecting passwords and accounts, handling sensitive information, maintaining device and network security, and identifying and reporting security incidents. The assessment is intended for employees across all business functions and does not require prior cybersecurity training or technical expertise.