Certification is based on a specialized online risk assessment questionnaire. It generates a set of prioritized remediation tasks designed to reduce your risk of a breach. Best practices are available to help move you forward. Once you have completed the tasks, your certification is complete.