Academy
For employers
Read a Halderstone credential on a CV and know what was assessed to earn it, what it says about the candidate, and what it deliberately does not say
Assessed capability, not certified attendance
Every credential rests on a structured examination and an applied capstone, both passed before anything is awarded. So it answers the question that matters in hiring: not what a candidate sat through, but what they could design, judge and defend.
Overview
The framework gives the credential its meaning
A statement of assessed professional capability in the design, operation and evaluation of management systems. It is built on our capability framework: a defined set of capability domains, a defined depth in each, and a defined role the holder was prepared for.
The framework spans the management system disciplines rather than sitting inside one, because the standards behind them are built on a common structure and share many of their requirements. That shared ground is taught and assessed once, and each discipline adds what is specific to it.
Learning is modular; the credential is not. It is awarded only where a structured examination and an applied capstone were both passed. Neither rewards reciting a standard: the examination tests whether the reasoning holds across situations, the capstone whether the holder can produce defensible work under realistic constraints.
In CV terms, the credential records standards-aligned, assessment-based preparation for a clearly defined professional responsibility, and it names the role and the discipline rather than leaving them implied by a course title.
Reading a credential
The role tells you the kind of work
Every credential carries two coordinates: the role it prepared the holder for, and the discipline it was applied in. Read the role first; the discipline then tells you where.
The three build on each other: the Diploma is the cross-discipline foundation, Certified adds one discipline, and Registered adds verified practice on top of both. A candidate may hold the first two without the third; Registered credentials are optional.
The Certified Manager credentials, in full
Every Certified credential names one discipline and the standard it is anchored in. The wording on a CV should match one of these exactly.
The Registered Manager levels, in full
Registered credentials come in four levels of verified experience and responsibility. The level is part of the title, and so is the discipline or standard it was earned in.
Available in: Artificial Intelligence (ISO/IEC 42001) · Business Continuity (ISO 22301) · Data Protection (ISO/IEC 27701) · Environmental Management (ISO 14001) · Information Security (ISO/IEC 27001) · Quality Management (ISO 9001)
The Certified Auditor credentials, in full
Every Certified credential names one discipline and the standard it is anchored in. The wording on a CV should match one of these exactly.
The Registered Auditor levels, in full
Registered credentials come in four levels of verified experience and responsibility. The level is part of the title, and so is the discipline or standard it was earned in.
Against: ISO/IEC 42001 (Artificial Intelligence) · ISO 22301 (Business Continuity) · ISO/IEC 27701 (Data Protection) · ISO 14001 (Environmental Management) · ISO/IEC 27001 (Information Security) · ISO 9001 (Quality Management)
The Registered levels are explained in more detail on a separate page, with the entry requirements per level and what validity and renewal involve.
What was assessed
Application is what every check looks for
Two assessments stand behind Diploma and Certified credentials, and two further checks behind Registered ones. None of them reward memorising a standard.
Structured examination
Scenario-based questions test whether core concepts are applied consistently across the capability domains rather than recalled.
Demonstrates that the holder can
interpret requirements, obligations and organisational context.
analyse risk, impact and the structure of a system.
evaluate controls, evidence and governance mechanisms.
apply the same reasoning in situations they have not seen.
Applied capstone
The holder works one complex organisational situation end to end under realistic constraints: regulatory pressure, incomplete evidence, competing priorities.
Demonstrates that the holder can
turn requirements into a workable design or assessment.
integrate several perspectives into one coherent answer.
justify decisions and trade-offs, not only conclusions.
produce output that is defensible in practice.
Registered credentials only
Registered credentials are optional, and they require a Diploma for the role plus a Certified credential in the same discipline. Two further checks sit on top of the assessments above; this is where "was assessed" becomes "has done this, recently".
Experience verification
The holder evidences real roles and activities in the discipline or standard, with references where appropriate. The claims are reviewed for relevance, depth and consistency rather than by counting years.
Demonstrates
implementing, operating or assessing management systems in practice.
working under real constraints: regulatory requirements, operational reality.
applying the principles outside a controlled assessment.
sustained involvement in the discipline or standard.
Periodic reassessment
Registered credentials lapse unless revalidated: a structured examination set against how the standard and its practice have moved on.
Demonstrates
an up-to-date reading of the relevant standards and practices.
continued ability to apply the concepts as contexts change.
consistent analytical judgement, not recalled procedure.
ongoing professional engagement with the discipline.
Together the two mean a current Registered credential says something a certificate cannot: the capability was demonstrated, has been practised, and is still current. It is valid for three years at a time, so it is also the only credential that can lapse. Check the date.
Diplomas and Certified credentials do not expire: they record what was assessed, and when.
What each level asks for and how renewal works are set out on the Registered credentials page.
Baseline
The holder was assessed in every domain
For each capability domain, the table states what the credential evidences at the level the role requires.
Ask about the capstone if you want to know where a candidate went deepest.
Positioning
Each role fits a recognisable set of jobs
Manager credentials signal readiness to design, operate and improve a management system inside an organisation.
- Typical roles
Management system manager (ISMS, QMS, AIMS or PIMS)
Risk, compliance or governance lead
Functional owner for a management system discipline
- Scope of responsibility
Define system scope, structure and governance
Design and implement controls and operating processes
Coordinate stakeholders and keep the system effective
Drive improvement and integration across functions
- Positioning
- Roles carrying end-to-end responsibility for one management system or discipline.
Auditor credentials signal readiness to evaluate a management system independently and reach conclusions that survive challenge.
- Typical roles
Internal auditor
External auditor in a certification or advisory context
Risk, compliance or assurance specialist
- Scope of responsibility
Plan and conduct structured audits
Evaluate system effectiveness from evidence
Identify gaps, risks and improvement opportunities
Form and justify audit conclusions and recommendations
- Positioning
- Roles carrying assurance responsibility for management systems or disciplines.
Seniority is not part of the credential. A Certified Manager may be running their first system or their fourth: the credential says the capability was assessed, not how many years sit behind it.
Worth & limits
The credential model suits organisations running several systems
The model is built for organisations running more than one management system. If you run exactly one and only need it maintained, a narrower qualification may serve you just as well.
Worth most where you…
run, or plan to run, several management systems side by side.
need governance, risk and control aligned across disciplines.
want people who can design and defend a system, not follow a procedure.
are trying to reduce duplication and make audits less expensive.
It does not tell you that…
the candidate is senior, or ready to lead a function.
they have worked in your sector or at your scale.
they can carry a full audit alone on day one.
they will fit your organisation. That interview is still yours to run.
We would rather you hired well than hired our alumni. If a credential is being read as more than it claims, tell us: that is a fault in how we describe it.
FAQ
Good to know
What is Halderstone Academy?
A professional learning and credentialing academy focused on applied capability in management systems. Its programmes are structured around defined professional roles, Manager and Auditor, and aligned with recognised ISO management system standards.
The academy combines a cross-disciplinary foundation with discipline-specific specialisation in quality, information security, privacy, business continuity, environment and AI. Its credentials signal assessed capability in applying management system principles in real organisational contexts.
Do Halderstone credentials expire?
Diploma and Certified credentials do not expire. They attest that the holder demonstrated defined capabilities at the time of certification.
Registered credentials are time-bound by design: valid for three years, maintained through periodic reassessment, with the professional experience validated at registration and open to periodic review. That is what keeps them a reliable indicator of current capability.
How can a Halderstone credential be verified?
On request. Send us:
the full name of the credential holder.
the credential name.
the credential ID.
to credential-verification@halderstone.com. We confirm whether the credential is valid; for data-protection reasons, nothing further about the holder is disclosed.
How should we use a Halderstone credential in hiring?
As evidence of assessed capability for a defined role and, where applicable, within a specific discipline or standard. It tells you what the candidate has demonstrated the ability to do in management system practice. In practice:
a Diploma signals cross-disciplinary capability for the role.
a Certified credential signals application within a specific discipline or standard.
a Registered credential adds confirmation that capability is current and supported by validated experience at a defined level.
Read it alongside the requirements of the role and the candidate's broader experience and track record.
Does a Halderstone credential indicate practical capability or theoretical knowledge?
Applied capability, by design. Credentials are awarded on structured assessment of the ability to interpret, apply and work with management system concepts in practice, rather than on knowledge alone. Registered credentials extend this by confirming that the capability remains current and is supported by validated professional experience.
Does a Halderstone credential by itself mean the candidate is senior or fully qualified for the role?
No. Diploma and Certified credentials attest capability built and assessed in the professional tracks; Registered credentials add validated current capability and experience at a defined level. None of them is a complete assessment of seniority or of suitability for your specific role.
Seniority in practice depends on organisational context, industry experience, leadership responsibility and past performance. The credentials give you a structured, externally validated signal of capability and experience, to be read alongside the candidate's broader profile.
Can we have our own team assessed the same way?
Yes. Participants in an in-house run earn the same module certificates as public learners, assessed the same way, whether they take a published module, an adapted one or a full track. Keeping the assessment identical across delivery modes is the point.
Checking a candidate
Verify a credential
Send the credential name, the holder's full name and the credential ID, and we confirm whether the credential is valid.
Email the verification deskFor data-protection reasons: a yes or a no, and nothing more about the holder.
Interviewing with the framework
The six capability domains work as an interview structure: one question per domain, at the depth the role actually needs.
Developing your own people