Validate
Your Expertise, Elevate Your Career, and Help
Define
the Future of Cybersecurity Analysts.
Cybersecurity is evolving at unprecedented speed. AI, automation, and relentless threats demand not just technical mastery, but leadership, collaboration, and the courage to set new standards.
The ECSA Grandfathering Program doesn’t simply validate expertise, it invites seasoned professionals to co-create tomorrow’s benchmarks through a community-led standard shaped by those on the AI frontlines.
By joining ECSA Grandfathering, you are helping to build the very foundation that will guide the next generation of analysts and make the digital world safer for everyone.
Certification is earned once your experience is validated by two nominated verifiers.
Cybersecurity experience of 3 years or more in 3 of the 5 recommended domains:
Domain 1: Security Architecture Design and Implementation
Domain 2: Security Monitoring and Detection
Domain 3: Threat and Vulnerability Management
Domain 4: Incident Response and Forensics
Domain 5: Cybersecurity Governance, Risk, and Compliance
Certification is earned once your experience is validated by two nominated verifiers.
Validation by one verifier to determine eligibility. Upon approval, the applicant must successfully pass the exam to earn certification.
Cybersecurity experience of 3 years or more in 3 of the 5 recommended domains:
Domain 1: Security Architecture Design and Implementation
Domain 2: Security Monitoring and Detection
Domain 3: Threat and Vulnerability Management
Domain 4: Incident Response and Forensics
Domain 5: Cybersecurity Governance, Risk, and Compliance
Ability to demonstrate skills through exam
Certification is achieved through validation by a nominated verifier and passing the exam.
Complete the application form based on your chosen eligibility path.
1. Competence Verification: Provide details of at least 2 professional verifiers.
2. Skills-Validation: Provide details of at least one professional verifier.
Upon submission, your application will be reviewed by the EC-Council Certification team. You will be notified of the outcome (approval or denial) via email within 3 weeks.
1. Competence Verification Path: Candidates will be required
to submit evidence of competency which will be verified. Once approved, a nominal processing fee
of $200 will apply. The requirement to take the exam will be waived.
2. Skills-Validation Path: Candidates will be required to submit an eligibility application.
Once approved, a nominal $250 processing fee applies, covering e-courseware, video materials,
and an exam voucher. Certification requires passing the exam.
1. Competence Verification: Get certified upon successful
application approval and completion of payment.
2. Skills-Validation: Get certified after successful completion of the exam.
The future of cybersecurity cannot be built in isolation. It demands a community of experienced professionals who want to contribute their knowledge, share their perspective, and help define the standards that will guide the analysts of tomorrow.
The ECSA Grandfathering Program is a collective effort to advance the profession, keeping pace with rapid changes in AI, automation, and emerging threats.
With ECSA grandfathering program, our vision is to:
The EC-Council Certified Security Analyst (ECSA) Grandfathering Program provides a structured pathway for competence verification of cybersecurity professionals with over 3 years of proven experience. Eligibility may be achieved through one of two routes: (1) validation of professional experience by at least two verifiers, or (2) a combined pathway requiring verification by at least one verifier along with successful completion of the skill assessment exam.
Eligible professionals can attain the ECSA credential with a minimum of three years of relevant industry experience, by one of the two pathways:
The program follows a structured review and approval process:
No, applicants with less than 3 years of experience do not qualify for the ECSA grandfathering program.
Yes, applicants must nominate at least one individual from their organization who can verify the professional experience claimed in the application. This may be supplemented with additional checks if necessary.
Yes. Freelancers and independent consultants are eligible to apply through the competence-verification pathway, provided they can demonstrate at least 3 years of relevant experience across 2 of the 5 required domains and submit verifiable references to support their application.
Applications are typically reviewed and processed within 3 weeks from the date of submission.
You will receive an official notification via email once your application has been reviewed. If approved, the email will include the next steps for completing the credentialing process. If additional information or documentation is required, specific instructions will be provided in the communication. Please allow 3 weeks for processing after submission.
You are responsible for ensuring your nominated verifiers are responsive. A lack of response may delay the review process or affect the outcome of your application. We recommend choosing individuals who can reliably validate your experience and are likely to respond in a timely manner.
No. The ECSA certification awarded through the Grandfathering Program is non-transferable and cannot be reassigned across organizations, individuals, or jurisdictions.
In cases where the application does not meet the eligibility requirements, you may be asked to submit further documentation or pursue the ECSA certification through the standard exam route.
No. The decision made on the application is final. However, if your application does not meet the criteria for the grandfathering pathway, you can still pursue the ECSA certification through the standard exam-based route.
Yes. The ECSA certification obtained via the Grandfathering Program follows the same renewal requirements as the exam-based pathway, including compliance with the EC-Council Continuing Education (ECE) Program.
To apply, visit the official ECSA Grandfathering Application Page, complete the online application form, and upload all required supporting documents.
*Note: Participants will receive access to ECSA courseware when it becomes available at launch.
