Auditors Rights and Duties

Interested in learning more about SIM3 and OCF? Become an Auditor! As a Certified SIM3 Auditor you will have the chance to improve your skills and learn from some of the most experienced cybersecurity and incident management experts worldwide – who also pioneered and developed SIM3.

A Certified SIM3 Auditor has the following rights:

  • Show accreditation as Certified SIM3 Auditor and be mentioned on OCF’s authoritative website with all Auditors in good standing
  • Perform SIM3 assessments and issue reports and assessment validations using OCF & SIM3 logo
  • Perform SIM3 audits and issue reports and audit certificates using OCF & SIM3 logo
  • Give up to a half day SIM3 workshops and trainings using OCF materials (longer trainings require licensing by OCF)
  • Attend OCF/SIM3 development/sharing workshops at marginal cost only & receive updated materials
  • Have direct QA contact with OCF

And the following duties:

  • Perform SIM3 assessments and audits adhering to OCF/SIM3 code of ethics
  • Attend at least one OCF/SIM3 development/sharing workshop every 3 years
  • Show to have done at least 1 assessment or audit per year, by sending in a short report with findings and recommendations for SIM3 development – nothing confidential!
  • Report audits to OCF – only name and date, no content
  • Annual fee for maintenance of status: based on not-for-profit – first year after training is free