What testers need to know about the changes to the CHECK scheme

The report summarizes significant changes to the NCSC CHECK scheme, mandating UK Cyber Security Council professional titles (CTLs: Principal/Chartered; CTMs: Practitioner by March 2026), requiring CHECK companies to hold Cyber Essentials Plus, and tightening expectations for scoping, risk-aware exploitation, evidence-based reporting, and CTL accountability. It highlights increased NCSC report reviews, the need for neutral, prioritized and actionable reporting, ongoing CPD and masterclass attendance, and a renewal model focused on holding the correct UKCSC title (with transitional recognition of prior technical passes). The overarching message is that CHECK emphasizes validated, risk-focused testing and professional conduct over raw tool outputs.