Our Competencies

Experience confirmed by certifications

Cybersecurity begins with knowledge

ComCERT, a leading provider of cybersecurity services in Poland, has a team of certified experts and a wide portfolio of certifications that confirm the quality and effectiveness of our operations.

We hold certifications at both the organizational and individual levels, ensuring compliance with international standards and demonstrating our capability to execute complex IT security projects.

Company certifications

ISO-IEC-27001_2022 (4)

ISO/IEC 27001 - Information Security Management System

The certificate addresses international standards for information security management, and validates skills in implementing and auditing information security management systems (ISMS). It covers practices in security policies, risk management, data protection and regulatory compliance. It is suitable for both implementers and auditors.

ISO-FCE-NATO-eng

Industrial Security Clearance Certificate – NATO level

A document certifying ComCERT’s ability to ensure the protection of classified information from unauthorized disclosure in connection with the execution of contracts or tasks to the level of NATO Secret and NATO Confidential. It is issued by the Internal Security Agency (ABW)

ISO-FCE-UE-eng

Industrial Security Clearance Certificate – EU/UE level

Document confirming ComCERT’s ability to ensure protection of classified information from unauthorized disclosure in connection with the performance of contracts or tasks to the level of UE/EU Secret, UE/EU Confidential

PN-EN-ISO-22301

ISO 22301 – Business Continuity Management System

An international standard that aims to ensure that organizations are able to continue operations in the event of incidents that disrupt normal operations. It focuses on planning, implementing and maintaining a business continuity management system. It helps organizations identify potential threats and their impact on business operations, enabling quick and effective responses. As a result, operational downtime is minimized and business processes are protected from disruption.

Authorized_Use_CERT_2159

CERT™ (Computer Emergency Response Team)

Receiving this authorization confirms the high quality of ComCERT’s incident response and IT security management activities. It allows cooperation with global CERT/CSIRT networks

FIRTS

FIRST (Forum of Incident Response and Security Teams)

Membership in FIRST confirms that ComCERT meets the highest standards in security incident management and international cooperation. FIRST promotes best practices, supports the development of tools and methods, and facilitates rapid response to global threats.

TF CSIRT

TF-CSIRT (Trusted Introducer)

TF-CSIRT is an initiative that brings together CSIRTs (Computer Security Incident Response Teams) in Europe, supporting their collaboration and development. Trusted Introducer is an accreditation program that enables CSIRT teams to receive formal recognition for their competence and incident response capabilities.

Certificates from our experts

CEH

CEH (Certified Ethical Hacker)

This certificate confirms practical skills in identifying security vulnerabilities and conducting penetration tests. The CEH certification covers knowledge of techniques and tools used by cybercriminals, as well as effective methods of protecting against cyber threats. 

CompTIA

CompTIA Security+

CompTIA Security+ is an international certification that confirms knowledge and skills in the field of IT security. It covers system security, network infrastructure, cryptography, assessments, and audits.

CISA (Certified Information Systems Auditor)

The CISA (Certified Information Systems Auditor) certification confirms knowledge and skills in auditing, controlling, and assessing information systems. 

It covers five key domains: information systems auditing processes, IT governance and management, protection of information assets, information systems lifecycle management, and business continuity and disaster recovery planning. 

CRISC (Certified in Risk and Information Systems Control)

The CRISC (Certified in Risk and Information Systems Control) certification confirms specialized knowledge and skills in IT risk management and information systems control. The certification covers key areas such as identifying and assessing IT risks, implementing appropriate control measures, monitoring threats and supporting organizations in building resilience against incidents and ensuring compliance with regulatory requirements.

forti

Fortinet NSE (Network Security Expert)

Implementation and management of Fortinet network security solutions.

CCNA Security (Cisco Certified Network Associate Security)

The CCNA Security certification covers knowledge and practical skills in designing, configuring, and managing network infrastructure, managing security policies and implementing network security solutions.

ITIL (Information Technology Infrastructure Library)

The ITIL certification confirms knowledge of best practices in IT Service Management (ITSM). It covers  the principles of designing, implementing, and managing IT processes, incident management, change management, business continuity and delivering IT services in line with business and user expectations.

SIM3 (Security Incident Management Maturity Model)

SIM3 is an international model for assessing the operational maturity of cybersecurity teams (SOC, CSIRT). The assessment focuses on four key areas: Organisation, People, Tools and Processes. ComCERT’s expertise in SIM3 enables us to conduct audits, self-assessments, and projects supporting the development and professionalisation of teams responsible for security incident management.

CIHE (Certified Information Handling Engineer)

The CIHE (Certified Incident Handling Engineer) certification confirms knowledge and practical skills in IT incident handling and response. It covers the entire incident handling lifecycle: from identifying threats and vulnerabilities, preparing the organisation, and first response actions, through containment, eradication, recovery, and post-incident follow-up activities. 

OSCP (Offensive Security Certified Professional)

The OSCP (Offensive Security Certified Professional) certification confirms advanced skills in penetration testing and offensive security techniques. OSCP competencies include identifying and exploiting vulnerabilities, bypassing security controls, privilege escalation, analysing Windows and Linux environments, and preparing detailed reports with recommendations for remediation. 

OSWP (Offensive Security Wireless Professional)

The OSWP (Offensive Security Wireless Professional) certification confirms specialized knowledge and skills in wireless network security testing. OSWP competencies include identifying Wi-Fi vulnerabilities, breaking wireless encryption protocols, capturing and analysing wireless traffic, and providing recommendations for securing wireless environments. 

OSCE (Offensive Security Certified Expert)

The OSCE (Offensive Security Certified Expert) certification confirms expert-level skills in penetration testing, exploit development, and advanced attack techniques. OSCE competencies include security bypass techniques, custom exploit creation, client-side and server-side attacks, and performing advanced security testing in highly secured environments. 

The ISO/IEC 27001:2022 Lead Auditor

The ISO/IEC 27001:2022 Lead Auditor certification confirms competencies in planning, conducting, and evaluating audits of Information Security Management Systems (ISMS). It enables the verification of compliance with the standard’s requirements and the effectiveness of implemented security controls. 

blue te

Blue Team Level 1 (BTL1)

The Blue Team Level 1 (BTL1) certification confirms practical skills in detecting, analysing, and responding to cybersecurity incidents. It covers working with logs, threat analysis, anomaly detection, and essential techniques for defending and monitoring IT environments. 

Investing in growth?

Don’t forget security.

Leave your contact details and we’ll show you how to protect your business at every stage.