The Cybersecurity Trade Project
Documentation Portal Explore framework & governance Career Estimator Calculate trade tier & PLA hours Digital Logbook Cryptographic runtime attestation PWA Trade Clearinghouse Central ingestion & credential registry Telemetry Gateway Zero-knowledge underwriter ratio attestation
Discussions GitHub

National Cybersecurity Trade Board: Charter & Governance Structure

The National Cybersecurity Trade Board serves as the independent, vendor-neutral standard-setting and regulatory licensure authority for the cybersecurity trade.

1. Statutory Scope & Authority

The Trade Board functions analogous to state boards of professional engineers, medical licensing bodies, and electrical regulatory commissions:

  1. Licensure & Registry: Issues, audits, suspends, and revokes Apprentice, Journeyman, and Master Practitioner credentials.
  2. Practical Examination Standards: Develops, maintains, and scores objective, hands-on, multi-stage practical challenge examinations (eliminating multiple-choice memorization).
  3. Malpractice Review & Ethics Enforcement: Investigates ethical breaches, gross negligence, fraudulent logbook telemetry, and enforces disciplinary sanctions.
  4. Specialty Endorsement Accreditation: Accredits domain-specific modular tracks (e.g., Cloud, ICS/SCADA, MedTech).

2. Eleven-Member Balanced Board Composition (Tripartite 4 - 4 - 3 Model)

To ensure no single special interest, commercial vendor, or corporate lobby captures the regulatory body, the Board maintains a strict Tripartite 11-Member Voting Quorum (4 - 4 - 3) paired with two permanent non-voting advisory delegates:

+─────────────────────────────────────────────────────────────────────────────+
| THE TRIPARTITE ELEVEN-MEMBER BOARD (4 - 4 - 3 BALANCE)                      |
+─────────────────────────────────────────────────────────────────────────────+
  │
  ├─► PILLAR 1: WORKFORCE & PRACTITIONERS (4 Voting Seats : 36.4%)
  │   • 2 Seats: Active Master Practitioners (Elected by Masters)
  │   • 1 Seat:  Active Licensed Journeyman (Elected by Journeymen)
  │   • 1 Seat:  Craft Guild Worker Representative (Elected by Guild)
  │
  ├─► PILLAR 2: BUSINESS, EMPLOYERS & RISK CAPITAL (4 Voting Seats : 36.4%)
  │   • 2 Seats: Enterprise & Critical Infrastructure CISOs (Employer Appointees)
  │   • 2 Seats: Cyber Insurance Underwriters & Actuaries (Carrier Appointees)
  │
  └─► PILLAR 3: INDEPENDENT PUBLIC INTEREST & EDUCATION (3 Voting Seats : 27.2%)
      • 1 Seat:  Public Safety & Consumer Protection Legal Advocate
      • 1 Seat:  Public Vocational Educator / Community College Dean
      • 1 Seat:  Independent Training & Curriculum Specialist (JATC Trustee)

+─────────────────────────────────────────────────────────────────────────────+
| TWO PERMANENT NON-VOTING ADVISORY DELEGATES                                 |
+─────────────────────────────────────────────────────────────────────────────+
  │
  ├─► 1 Seat: Federal Standards & Agency Liaison (NIST NICE / CISA)
  └─► 1 Seat: Apprentice Advocate Delegate (Elected directly by Apprentices)

A. Distinct Representation Mandates & Focus Areas

Even within stakeholder groupings, individual seats hold specific, legally distinct representational mandates:

  1. Workforce & Practice (4 Seats):
    • Active Master Practitioners (2 Seats): Represent senior engineering architecture, statutory Master of Record (MoR) sign-off liability, practical challenge examination rigor, and ethical refusal protocols (Form FORM-001/002).
    • Active Licensed Journeyman (1 Seat): Represents the frontline working majority, shift workload sustainability, on-shift 2:1 supervisory ratio enforcement, tooling ergonomics, and technical debt escalation (Form FORM-003).
    • Craft Guild Worker Representative (1 Seat): Represents worker legal rights, labor safety standards, collective defense shield operations, portable benefit trust viability, and protection against employer retaliation.
  2. Business, Employers & Risk Capital (4 Seats):
    • Enterprise & Critical Infrastructure CISOs (2 Seats): Represent organizational defense feasibility, corporate risk appetite, commercial velocity, and executive governance.
    • Cyber Insurance Underwriters & Actuaries (2 Seats): Represent actuarial loss modeling, underwriting warranty compliance, telemetry verification, and policy discount structures.
  3. Independent Public Interest & Education (3 Seats):
    • Public Safety & Consumer Protection Advocate (1 Seat): Represents the general public, consumer data privacy, patient safety, and unbiased malpractice discipline.
    • Public Vocational Educator / Community College Dean (1 Seat): Represents public community college systems, collegiate lab range funding, and tuition-free vocational access.
    • JATC Curriculum Specialist (1 Seat): Represents pedagogical instructional quality, Related Technical Instruction (RTI) standards, and psychometric exam validity.
  4. Non-Voting Advisory Delegates (2 Seats):
    • Apprentice Advocate Delegate: Represents the direct welfare, mentorship safety, and ratio compliance of registered trainees.
    • Federal Standards Liaison (NIST NICE / CISA): Represents alignment with national cybersecurity workforce taxonomies and federal critical infrastructure directives.

3. Statutory Powers of the Advisory Delegates

To ensure the non-voting advisory delegates maintain substantive influence over standard-setting without risking regulatory dilution:

  1. The Right of the Floor: The Apprentice Advocate Delegate and NIST/CISA Liaison hold full participation, questioning, and debate privileges in all open public hearings and closed executive sessions.
  2. Direct Docket Sponsorship: Both advisory delegates possess the statutory authority to introduce formal motions, petitions, and policy proposals directly onto the Board’s official voting docket.
  3. The 30-Day Formal Response Mandate: When an advisory delegate submits a formal petition regarding supervisory ratio violations, training safety concerns, or federal guideline updates, the Board is legally required to debate the item on the record and issue a written public finding within 30 days.
  4. The Dissenting Opinion Docket: If a Board vote passes that an advisory delegate believes harms apprentices or conflicts with federal standards, the delegate holds the right to enter an official Minority Advisory Dissent into the permanent public clearinghouse record.

4. Bilateral Governance & The JATC Accord

To eliminate regulatory antagonism and prevent the Board from disrupting active vocational training pipelines:

  • The 18-Month Curriculum Notice Rule: Any structural change to practical exam rubrics, core domain weightings, or specialty requirements enacted by the Board mandates a minimum 18-month transition runway before taking effect. This guarantees Guild JATC programs can update Related Technical Instruction (RTI) without stranding active apprentice cohorts.
  • Joint Standards Review Committee: Exam revisions must pass through a joint standing committee composed equally of Board Examiners and Guild JATC Curriculum Directors before formal ratification.
  • Appeals & Arbitration: The Guild holds standing to petition the Board for administrative reviews regarding exam scoring variance, curriculum disputes, or unfair examination prerequisites.

5. Parliamentary Authority & Sunshine Open Meetings Rules

To ensure proceedings remain fair, orderly, and publicly auditable:

  • Parliamentary Standard: All regular, special, and committee meetings of the Board are conducted under Robert’s Rules of Order Newly Revised (RONR), except where specifically superseded by constitutional bylaws.
  • 30-Day Advance Public Notice: All regular standard-setting meetings, exam rubric debates, and proposed rule changes must be published on the Board Registry at least 30 calendar days in advance with a public agenda.
  • Open Public Livestream & Voting Record: All general policy hearings and roll-call votes are live-streamed and transcribed. Every individual trustee vote is published to the permanent public record within 5 business days.
  • Strictly Restricted Closed Sessions: Closed executive sessions are legally permitted exclusively for investigating individual named malpractice complaints (to protect licensee due process), reviewing confidential live practical challenge exam keys (to prevent cheating leaks), or conferring with legal counsel on active litigation.

6. Standing Committees & Ethics Review Architecture

To maintain regulatory oversight and adjudicate violations of trade standards, the Board maintains four standing statutory committees:

  1. Practical Challenge Examination & Psychometrics Committee: Oversees hands-on exam rubrics, cyber range infrastructure, and air-gapped grading benchmarks.
  2. Credential Evaluation & Prior Learning Clearinghouse: Evaluates commercial certifications and military runtime for PLA credit articulation.
  3. Malpractice & Ethics Review Committee:
    • Composition: Tripartite 3-member panel consisting of 1 Master Practitioner Trustee, 1 Employer CISO Trustee, and 1 Public Safety / Legal Advocate Trustee.
    • Authority: Adjudicates formal complaints of logbook fraud, false compliance attestations, technical refusal retaliation, and severe civil rights violations filed via Form FORM-004.
    • Due Process Standards: Guarantees 30-day evidentiary discovery, right to representation by Guild defense counsel, confidential witness testimony, and written published findings.
    • Sanction Powers: Issues binding disciplinary orders including public reprimands, supervisory sign-off debarment, practicing license suspensions (12 to 36 months), permanent license revocations, and statutory referrals to state/federal regulators.
  4. Appeals & Administrative Review Board: Independent tribunal hearing licensee appeals against committee findings or examination disputes.