Candidate Information

Candidate Information

Applicability

The Certified Automation Cybersecurity Specialist (CACS) and the Certified Automation Cybersecurity Expert (CACE) are global programs that apply to the field of industrial control or SCADA system cybersecurity. The knowledge required for the CACS / CACE programs are based on current industry accepted practices and standards.


Application Checklist

Application forms

  • The application forms must be typed
  • Applications MUST be e-mailed to CFSE and must be received 2 weeks prior to the exam
  • Photocopies of your passport and diplomas must be emailed to CFSE

Case study

The case study application form must be submitted by candidates to provide a description of project where they demonstrated their skills, knowledge, and responsibility for a significant element of the of the cybersecurity of an automation system in accord with relevant standards such as ISA/IEC 62443, NERC CIP, API 1164. This must also include a supporting statement from one of the referees. (Applies to CACE candidates only)

Professional References

Requires the applicant to list referees. The following applies:

A minimum of four (4) references must be provided by the CACE applicant and two (2) references by the CACS applicant. An applicant is encouraged to use an immediate supervisor as a referee.

  1. A supporting statement from one of the referees for the Case Study (CACS not applicable)
  2. Referees should have personal knowledge of applicants experience and collectively be able to attest to the entire amount of experience claimed.
  3. Referees must NOT be related to the applicant.
  4. Each referee must complete a Referee Statement form, and email it directly to CFSE.
  5. CFSE reserves the right to contact any referee for verification purposes.

Application Fees

The applicable fees for the CACE / CACS examination are listed on the Examination Fee information sheet. Fees should shortly follow with the application. Application fees can be paid by bank check, money order, credit card (Visa, MasterCard, Amex, or PayPal only), or purchase order. Applications will not be reviewed until the FULL application process has been received by CFSE and the payment has been made.


CACE Examination Format

The examination will take four (4) hours and is two (2) sessions.. The examination consists of 100 multiple choice questions.

Category No. of Questions Points Minimum Score
Multiple Choice 100 1 80%

In order to pass the exam the candidate will have to score at least 80% for the total examination. All CACE exams are open book with all readily available published references allowed to be used during the exam. Please also note that the candidates are specifically encouraged to at least bring a copy of ISA 99.02.01: 2009. Other textbooks, publicly available published course materials, and workbooks are also allowed and may be useful to the candidates. Although occasional general hand notes in these reference materials may be allowed at the discretion of the CFSE appointed exam proctor, it is expressly forbidden to bring in any personal exam-specific notes.


CACS Examination Format

The examination will take four (4) hours and is one (1) session. The examination consists of 60 multiple choice questions.

Category No. of Questions Points Minimum Score
Multiple Choice 60 1 80%

In order to pass the exam the candidate will have to score at least 80% for the total examination. All CACS exams are open book with all readily available published references allowed to be used during the exam. Please also note that the candidates are specifically encouraged to at least bring a copy of IISA99-62443 and NIST Cybersecurity Framework.  Other textbooks, publicly available published course materials, and workbooks are also allowed and may be useful to the candidates. Although occasional general hand notes in these reference materials may be allowed at the discretion of the CACE appointed exam proctor, it is expressly forbidden to bring in any personal exam-specific notes.


Cancellation Policy

CACE reserves the right, to cancel without specified reason any examination three (3) weeks before the examination date. CACE will reschedule any canceled examination at their convenience. The applicant has the right to reschedule prior to payment due date.


Certificate Renewals

The initial CACS/CACE certificate is only valid for a period of three (3) years. After that date it must be renewed by submitting the renewal application form and accompanying fee. It is not necessary to take the exam again. The renewal basically consists of a confirmation that the renewal applicant is still active in their corresponding certificate specialty along with opportunities for additional supporting qualifications and experience. Once the renewal has been accepted, the certificate is valid for an additional three (3) year period. In the event that the certificate expires through either lack of renewal from the initial issue of the certificate, it can be renewed by re-taking the examination. It is the responsibility of the candidate to renew their CACE/CACS certificate on time.


Deadline for Filing Applications

Completed application materials must be received by CFSE at least 2 weeks prior to the exam date. The specific date is usually noted on the exam schedule information page. Please note that because of the tight deadline, incomplete applications will not be guaranteed a place at the exam. It is strongly recommended that all applicants send in their information well in advance of this deadline to insure a place at the exam. There are no refunds.


Eligibility Requirements for Examination - CACE

A candidate must have 4 referee statements from other professionals recommending candidates.

A case study must be submitted candidates to provide a description of project where they demonstrated their skills, knowledge, and responsibility for a significant element of the cybersecurity of an automation system in accord with relevant standards such as ISA/IEC 62443 and NIST Cybersecurity Framework. This will also include a supporting statement from one of the referees.

Please see application form and example.

A candidate must have a minimum of 10 years related experience with credit given for education as follows:

Highest Educational Level Engineering Degree Other Technical degree Non-Technical Degree
No higher level education Subtract 0 years Subtract 0 years Subtract 0 years
Bachelor Degree Subtract 3 years Subtract 2 year Subtract 1 year
Master Degree Subtract 4 years Subtract 3 years Subtract 1 ½ years
PhD Subtract 6 years Subtract 4 years Subtract 2 years
Professional Engineering Certification/License (PE) Subtract 1 additional year Subtract 1 additional year Subtract 1 ½  additional years

Using this table as guidance, a person with no higher level education would need at least 10 years of related experience to be considered for the CACE program. A B.S./B.Sc./B. Eng. degree in an engineering discipline immediately reduces the minimum experience requirement to 7 years while additional certification as a licensed professional engineer by a recognized state or national body reduces the minimum requirement to 6 years. Similarly, someone with a B.S. degree in a scientific discipline such as physics or chemistry would need at least 8 years of relevant safety and engineering experience to meet the requirements.

CACE Material to be Submitted:

CACE applicants must arrange to have the following materials submitted before the application deadline (see attached schedule):

  1. Examination Application Form – submitted by applicant.
  2. Case Study Form - submitted by applicant - a description of project where they demonstrated their skills, knowledge, and responsibility for a significant element of the cybersecurity of an automation system in accord with relevant standards such as ISA/IEC 62443
  3. Referee Statement - (four are required) - submitted by referee (one for each referee listed in Examination Application Form).  This will also include a supporting statement from one of the referees for the Case Study.
  4. Copies of Licenses, Registrations & Certification -submitted by applicant (one for each listed in Examination Application Form).  A photocopy of your diploma will suffice the requirement.
  5. Please submit a copy of your passport / government ID.
  6. Payment for Application Fee

Eligibility Requirements for Examination - CACS

A candidate must have 2 referee statements from other professionals recommending candidates.

A candidate must have a minimum of 2 years related experience with credit given for education as follows:

Highest Educational Level Engineering Degree Other Technical degree Non-Technical Degree
No higher level education Subtract 0 years Subtract 0 years Subtract 0 years
Bachelor Degree Subtract 3 years Subtract 2 year Subtract 1 year

CACS Material to be Submitted:

CACS applicants must arrange to have the following materials submitted electronically before the application deadline (see attached schedule):

  1. Examination Application Form – submitted by applicant.
  2. Referee Statement - (two are required) submitted by referee (one for each referee listed in Examination Application Form)
  3. Copies of Licenses, Registrations & Certification - submitted by applicant (one for each listed in Examination Application Form).  A scanned copy of your diploma will suffice the requirement.
  4. Professional Conduct Statement – submitted by applicant via email
  5. Please submit a scan of your passport or government ID
  6. Payment for Application Fee

Examination Results

Results will be emailed approximately 8 weeks after the examination. No results will be given over the phone. Please do not call CFSE for test results. If the applicant did not report for the examination, or did not pass the examination, the results letter will be e-mailed to explain how to schedule for a retake examination, and state the applicable fees.


Examination Rules and Conduct

Candidates are expected to exhibit proper examination decorum throughout the examination. Government issued identification is required. Candidates will be required to arrive at least 30 minutes prior to the scheduled time of examination. Candidates will not be admitted to the examination after the announcements have been given. Detailed instructions concerning arrival will be included with the admission notice. Published reference materials are permitted. Only non-programmable calculators will be allowed.


Language of Examination

Currently examinations are only available in the English language.


Mailing Address

For all correspondence concerning the CACE / CACS program please use the following address:

CFSE
80 North Main Street
Sellersville, PA 18960
USA


Notification of Examination

Admission Applicants must allow two (2) weeks for full processing of their complete applications. At least one week prior to the examination date, an admission notice will be sent to eligible candidates and will confirm dates, times, and location of the examination.  If the admission notice has not been received at least one (1) weeks prior to the examination date, the candidate must contact CFSE.


Refund Policy

There will be no refunds.


Training Courses

Training classes are not required to be eligible for the test. However, many candidates may prefer to receive training oriented toward the curriculum required for the examination.


Two Levels of Recognition are Available

a. CACE - Certified Automation Cybersecurity Expert
b. CACS- Certified Automation Cybersecurity Specialist