The Cybersecurity Trade Project
Documentation Portal Explore framework & governance Career Estimator Calculate trade tier & PLA hours Digital Logbook Cryptographic runtime attestation PWA Trade Clearinghouse Central ingestion & credential registry Telemetry Gateway Zero-knowledge underwriter ratio attestation
Discussions GitHub

Pillar IV: Professional Licensure & The Journeyman Standard

The cybersecurity industry is currently saturated with hundreds of competing commercial credentials. Vendors churn out proprietary multiple-choice tests and extract recurring annual renewal fees, confusing newcomers and employers alike.

Rather than invalidating the legitimate work practitioners have already completed or endorsing commercial vendor lock-in, the trade model establishes an independent National Cybersecurity Trade Board and Credential Evaluation Clearinghouse. The Board systematically evaluates existing credentials against open standards (such as NIST NICE SP 800-181), determining appropriate tier mapping, filtering out unproctored multiple-choice exams, and recognizing verified practical credentials.

Core Mandate: Replace fragmented vendor certifications with an independent, legally recognized Journeyman standard anchored to practical competency and open standards.

1. The Board Credential Evaluation Clearinghouse

The National Cybersecurity Trade Board conducts objective, peer-reviewed evaluations of commercial and academic credentials:

  • Objective Evaluation Criteria: Certifications are evaluated based on hands-on lab rigor, psychometric validity, identity-verified proctoring, and alignment with open competencies, not vendor market share.
  • Tier Placement Authority: The Board determines whether a credential qualifies for Pre-Apprenticeship, Operational Rotational credit, or Specialty Endorsements.
  • Weeding Out Brain Dumps: Multiple-choice exams that lack practical execution or verified proctoring controls are excluded from trade milestone credits.
  • Preserving Worker Investment: Qualified practitioners holding Board-accredited credentials receive proportional credit toward Related Technical Instruction (RTI) classroom hours and logbook milestones.

2. The Journeyman License Milestone

The defining milestone transitioning a worker from supervised apprentice to independent practitioner is the Journeyman License:

  • The Core Benchmark: Generalist licensure is anchored to multi-domain operational standards, specifically reflecting the rigor of multi-domain benchmarks (such as the CISSP 5-year multi-domain standard) or an equivalent Board-administered practical challenge examination.
  • Practical Challenge Pathways: Self-taught engineers, CTF competitors, and non-traditional candidates can challenge the Journeyman milestone directly through practical, hands-on lab examinations paired with verified operational logs. For complete conversion caps and exam rubrics, see Apprenticeship Standards & Operational On-Ramps.
  • Single Standard of Competence: Instead of collecting dozens of overlapping commercial badges, the Journeyman license serves as the unified, legally recognized standard of generalist operational competence.
  • Zero-Fee Competency Maintenance: Licensure renewal is maintained through verified ongoing operational practice hours or open technical contributions, eliminating recurring vendor annual maintenance fees (AMFs).

3. The Master of Record (Master Practitioner)

For high-consequence infrastructure, healthcare networks, financial backbones, and critical utilities, the framework establishes the Master Practitioner (Master of Record):

  • Scope of Authority: Requires 12,000+ verified operational hours and demonstrated specialty domain mastery.
  • Statutory Production Sign-Off: Holds statutory responsibility for inspecting and stamping major architectural baselines, root cryptographic ceremonies, and regulatory filings, legally separating technical safety from corporate management.

4. The Professional Self-Regulating Board

Modeled after state licensing panels, medical boards, and structural engineering boards:

  • Independent Multilateral Administration: A balanced, tripartite governing body maintaining an 11-member voting quorum (4 Workforce/Practitioners, 4 Employers/Insurers, 3 Independent Public/Education) paired with two permanent advisory delegates. For exact seat allocations and bylaws, see National Governance Board Structure.
  • Malpractice & Evidentiary Due Process: Investigates formal complaints of gross negligence, intentional control bypass, or audit falsification. License sanctions (reprimand, suspension, revocation) require clear and convincing evidence and full due process.
  • Interstate Reciprocity Compact: Administers digital licensing compacts ensuring credentials and logged hours remain fully portable across employers and state boundaries for remote work.