Program Advisory 2026-04: Updated Evidence Requirements
Revised evidence standards for access control and audit logging practices take effect September 1, 2026.
Program Resources
Announcements, policy changes, and program news from The Cyber AB.

Revised evidence standards for access control and audit logging practices take effect September 1, 2026.
Organizations with accreditation expiring between October and December 2026 may begin submitting renewal packages.
Updated guide includes clarified scoring criteria for configuration management and incident response practices.
Annual accreditation community event scheduled for November 4–5 in Arlington, VA. Early registration available through July.
The member portal will be unavailable from 11:00 PM to 3:00 AM ET for infrastructure upgrades and security patches.
All active assessors must complete 2026 continuing education requirements by August 31 to maintain qualification status.
New filters for geographic region, assessment level, and accreditation status are now available on the public C3PAO directory.
Updated program fee schedule for applications, renewals, and assessor registrations effective April 1, 2026.