The CACE/CACS program has defined specialties in order to provide exams specifically oriented to different fields of expertise. This gives candidates a much better match than other programs where only a general exams are given.
This program is for system integrators and service providers to demonstrate an understanding of cybersecurity concerns during the system integration portion of the cybersecurity lifecycle. Successful completion of this program will demonstrate competency to the IEC 62443-2-4 process and the IEC 62443-3-3 security capability requirements.
This program is used to demonstrate competency in the overall cybersecurity lifecycle including IEC 62443-2-1, IEC 62443-3-2, IEC 62443-3-3, and ISA TR 84.00.09. This program is for end users to demonstrate understanding on the analysis, design, and operations for automation systems, including risk assessment, CSRS, device selection, integration, system design, operation, and maintenance requirements.
This program is designed for device/application development staff who wish to show competency in software development with stronger cybersecurity resilience. The exam is based on the IEC 62443-4-1 standard covering the software development process and the IEC 624433-4-2 standard which describes security capability requirements.