CREST Launches World’s First Accredited AI Standards for Cybersecurity Service Providers The first-of-its-kind initiative marks a critical transition for the industry, from voluntary commitments to independently verified standards for AI-enabled cybersecurity services. CREST, the leading international non-profit representing the global cybersecurity industry, announces the launch of its first AI additions to its standards for accredited cybersecurity service providers. The first-of-its-kind initiative marks a critical transition for the industry, from voluntary commitments to independently verified standards for AI-enabled cybersecurity services. Over three-quarters (76%) of cybersecurity providers have increased their AI usage over the past year, and 69% are already integrating it into daily service delivery, according to CREST’s AI in Penetration Testing report. However, recognised standards for demonstrating responsible AI use have not kept pace with this change. As cybersecurity’s premier accrediting authority, CREST is stepping in to address this gap head-on. The standards provide practical, independently assessable requirements. These help service providers demonstrate and verify responsible AI usage, both within their businesses and when delivering services. Applications are now open for both existing CREST members, as well as cybersecurity service providers who wish to obtain additional recognition for the use of AI within their accredited penetration testing services. The optional AI-Enabled Penetration Testing requirements form part of the CREST Penetration Testing Accreditation Standard and provide independent assurance of responsible AI usage. “AI adoption is outpacing governance, and we are here to fix that. We recognise that buyers are increasingly demanding that AI-enabled services are independently assured. In such a fast-moving space, there was no time to waste. We believe these new additions to our standards will provide a practical, enforceable framework to regain the market’s trust.” – Nick Benson, CEO, CREST Trust is becoming a competitive differentiator for providers. Buyers, regulators, and procurement teams are demanding greater accountability and independent