Get Credentialed
Complete the credentialing pathway, undergo Legacy Core review, and receive a Trust Badge only when requirements are met. The free Trust Check does not issue a credential. Silver and Gold are earned outcomes.
Bronze Trust Badge
Baseline Readiness · issued after review
Contact us for pricing
Issued after review
Two stages
Start with the 2-Minute Business Trust Check. See where your business stands before deciding whether credentialing is right for you.
Free
Answer 7 plain questions and see a Trust Snapshot. Saving the snapshot is optional and comes after the result.
Credentialing
Turn documented readiness into a reviewed credential the business can show and others can verify—through scenario-based modules organized around the NIST Cybersecurity Framework.
Payment supports the credentialing service. Meeting the requirements and passing review earns the credential.
Get CredentialedSix chapters · scenario-based
The Legacy Protection Journey groups the credentialing pathway into six subject names small-business owners actually use—not jargon-first module numbers. Each chapter is scenario-based modules, about as long as a CPR class, built around everyday decisions.
The six owner-friendly chapters below are organized around all six NIST CSF 2.0 functions—Govern, Identify, Protect, Detect, Respond, and Recover—so plain-language scenes still line up with a framework others recognize.
Scenario-based modules, about as long as a CPR class.
Legacy Core is not affiliated with or endorsed by NIST.
Chapter 1 · CSF 2.0: Govern · Identify
Who owns the security call at your firm—and what client data, systems, and obligations would hurt most if they leaked? Start with that honest picture.
Chapter 2 · CSF 2.0: Protect
Shared passwords, open Wi-Fi, and “just this once” exceptions are where outsiders walk in. Lock access, networks, and cloud accounts before you buy another gadget.
Chapter 3 · CSF 2.0: Detect · Protect
The urgent email. The fake vendor. The attachment that looks fine. Learn to spot social engineering and early malware signs before one click spreads.
Chapter 4 · CSF 2.0: Identify · Protect · Govern
When money or client records are on the line, sloppy handling becomes a headline. Walk payment, privacy, and insurance conversations like an owner—not a guesser.
Chapter 5 · CSF 2.0: Respond · Recover · Detect
Monday-morning ransomware is a business problem, not an IT trivia question. Practice who you call, what you freeze, and how you get back to work.
Chapter 6 · CSF 2.0: Govern · Identify · Protect · Detect · Respond · Recover
Vendors, frameworks, and new AI tools can help—or widen the blast radius. Tie the habits together and leave with a working protection plan.
What you are buying
Legacy Core issues a credential and Trust Badge. When the security question comes, you have proof to point to, not another promise.
A structured credentialing pathway, required credentialing areas, and Legacy Core review before a Trust Badge is issued.
A public-facing badge linked to live verification, not a self-printed certificate or marketing logo.
Your business appears in the Public Business Trust Registry so others can confirm current credential status.
Annual renewal keeps the registry listing current. The commercial value is the credential, verification, and maintenance of that trust signal.
Who this is for
CPAs, bookkeepers, attorneys, financial advisers, and insurance agencies handling sensitive client data.
Medical and dental practices that need to show clients and referral partners they take readiness seriously.
Owner-operators ready to close their Trust Gap with a verifiable credential, not another marketing claim.
What you receive at Bronze
Bronze credential: Baseline Readiness
Issued after the credentialing pathway, Bronze requirements, and Legacy Core review. Completing the free Trust Check does not earn this badge.
Credentialing pathway content
Scenario-based modules, about as long as a CPR class, organized around the NIST Cybersecurity Framework. Legacy Core is not affiliated with or endorsed by NIST.
Trust Badge issuance
A public-facing Trust Badge that links to a live verification page in the Public Business Trust Registry.
Registry listing
Your business appears in the Public Business Trust Registry with tier, status, and area served.
Bronze, then Silver, then Gold
Bronze is Baseline Readiness. Silver is Evidence-Verified Implementation. Gold is Ongoing Verified Readiness. Silver and Gold cannot be earned through self-attestation. Silver and Gold implementation evidence must be submitted through a verified, approved Alliance Partner company assigned to the business. An authorized Legacy Core human reviewer must accept the evidence and approve the credential. Partners cannot award credentials. Payment, a referral relationship, or Alliance Partner membership does not guarantee approval. Completing the Journey does not automatically issue a Trust Badge — Legacy Core reviews first.
Protect what you've built. Know what to do when it matters.
Baseline Readiness
Know it. Document it. Own it.
Bronze is Baseline Readiness: the starting Trust Badge after the credentialing pathway and Legacy Core review.
Start here
Credentialing pathway
Enter the credentialing pathway, complete the required credentialing areas, and undergo Legacy Core review. A Trust Badge is issued only after approval.
Next
Next: Silver. Documented implementation, then review.
Evidence-Verified Implementation
Show it.
Silver is Evidence-Verified Implementation: documented implementation reviewed under the applicable Legacy Core credential standard.
Cannot be earned through self-attestation
Alliance Partner-supported pathway
Silver and Gold implementation evidence must be submitted through a verified, approved Alliance Partner company assigned to the business. An authorized Legacy Core human reviewer must accept the evidence and approve the credential. Partners cannot award credentials. A partner reviewing work it implemented is not an independent review. Payment or partner membership does not guarantee approval.
Legacy Core credential approval
An authorized Legacy Core human reviewer accepts the required evidence and decides whether the credential has been earned. Neither an implementation provider nor an external reviewer can award a Trust Badge. Self-attestation is never accepted.
Next
Next: Gold. Continued readiness shown over time.
Ongoing Verified Readiness
Maintain it.
Gold is Ongoing Verified Readiness: continued cybersecurity readiness demonstrated over time under the applicable Legacy Core credential standard.
Cannot be earned through self-attestation
Alliance Partner-supported pathway
Silver and Gold implementation evidence must be submitted through a verified, approved Alliance Partner company assigned to the business. An authorized Legacy Core human reviewer must accept the evidence and approve the credential. Partners cannot award credentials. A partner reviewing work it implemented is not an independent review. Payment or partner membership does not guarantee approval.
Legacy Core credential approval
An authorized Legacy Core human reviewer accepts the required evidence and decides whether the credential has been earned. Neither an implementation provider nor an external reviewer can award a Trust Badge. Self-attestation is never accepted.
Credentialing fees
Credentialing and registry fees depend on your business needs. Contact us for current pricing. Silver and Gold are earned after evidence review. They cannot be purchased as upgrades.
Starting credential
Contact us for pricing
Stay
Contact us for pricing
Earned tiers
Earned outcomes after documented implementation and review. You cannot buy them as upgrades. Silver and Gold cannot be earned through self-attestation. Silver and Gold implementation evidence must be submitted through a verified, approved Alliance Partner company assigned to the business. An authorized Legacy Core human reviewer must accept the evidence and approve the credential. Partners cannot award credentials. Payment, a referral relationship, or Alliance Partner membership does not guarantee approval.
That your business completed the credentialing pathway, met Bronze requirements, and received Legacy Core approval. The Bronze Trust Badge is listed in the Public Business Trust Registry with a live verification link. Bronze is Baseline Readiness. It does not claim that every control has been technically verified.
Silver and Gold cannot be earned through self-attestation. Silver and Gold implementation evidence must be submitted through a verified, approved Alliance Partner company assigned to the business. An authorized Legacy Core human reviewer must accept the evidence and approve the credential. Partners cannot award credentials. Payment, a referral relationship, or Alliance Partner membership does not guarantee approval. Contact us for registry renewal details.
No. Legacy Core does not require businesses to purchase cybersecurity implementation services or a specific security product to earn a credential. You may work with qualified implementation providers of your choice. Silver and Gold implementation evidence must be submitted through a verified, approved Alliance Partner company assigned to the business. An authorized Legacy Core human reviewer must accept the evidence and approve the credential. Partners cannot award credentials.
No. Legacy Core is not a regulator. The Trust Badge orients to recognized cybersecurity readiness frameworks such as NIST CSF and CIS Controls, and demonstrates a business’s commitment to readiness. It is not a government credential and does not imply any specific incident outcome.
Bronze credentialing is a one-time pathway. To stay listed on the Public Business Trust Registry, renewal is managed in the credentialed business portal. Contact us for current fees.
Your credential is issued once your readiness review is approved. The registry entry, Trust Badge, and verification URL go live at that moment and remain visible while your credential is in good standing.
The credentialing pathway is designed to bring your business to a readiness baseline. If the credential is not ready to issue, Legacy Core will tell you that more work is needed under the applicable credential standard.
Only public-safe fields: business name, tier, credential status, area served, and verification slug. Owner contact, payment data, internal notes, and review history are never displayed publicly.
See the published refund policy at the bottom of this site. In short: refunds are handled on a case-by-case basis prior to credential issuance and are not available after a Trust Badge has been issued.
Start Bronze credentialing when you are ready. A Trust Badge is issued only after review. Silver and Gold are earned later. Buying implementation work does not issue the badge.