Environment
Conformance.
CRA Certification validates that a specific Recovery Environment (RE) conforms to the rigorous architectural and control standards required to survive a loss-of-trust event.
// SCOPE_DEFINITION
> TARGET: RECOVERY_ENVIRONMENT
> STANDARD: CRA-STD-v1.0
> VALIDITY: 12 MONTHS
We audit the physics and logic of the vault. We do not certify
products, tools, or marketing claims.
Primary Pathway: Environment
The core function of the Authority is to validate resilience.
Environment Certification
An independent audit of a specific deployed environment against the CRA Standard. Verifies isolation, immutability, and evidence-based recovery capability.
> AUDIT SCOPE (CRMM):
- Architecture: Verification of Air Gap & Zones
- Controls: Evidence of Separation of Duties
- Testing: Observation of Destructive Rebuild
Supporting Pathways
The enablers required to build and operate a conforming environment.
01. INDIVIDUAL COMPETENCE
Technical training strictly aligned to the 6 CRMM Domains. Ensures operators possess the specific skills required to maintain Level 3+ environments.
> CURRICULUM FOCUS:
- D3 Identity: Isolated Active Directory Rebuilds
- D2 Forensics: Storage Immutability & Scanning
- D4 Orchestration: Clean-Room Automation
02. SERVICE PROVIDER ALIGNMENT
For Managed Service Providers (MSPs) operating recovery environments. Certifies the delivery capability and operational rigor to meet the CRA Standard.
> VALIDATION:
- Operational Runbooks
- Evidence of Separation of Duties
- SLA Alignment to Recovery Metrics