What you will learn
- How a real CTEM cycle flows from Scoping to Mobilization
- How security teams make decisions at each stage
- How to turn findings into owned, trackable remediation work
Explanation
Choose your proving ground lab
- Beginner CTEM Proving Ground Lab: Run one enterprise CTEM cycle for Acme Retail, an online retailer preparing for a major sales campaign. Available now.
- Practitioner CTEM Proving Ground Lab: Run a six stage enterprise cycle across cloud, identity, OT, and third party attack surface. Available now.
- Program Leader CTEM Proving Ground Lab: Design an operating model, governance rhythm, and an executive exposure report. Coming soon.
How you are assessed
Each proving ground lab presents an enterprise situation and a set of cards. You place every card into the correct decision box for that CTEM stage, then submit. Grading happens on the server, so the answer key never reaches your browser. A wrong layout is rejected with no hint and no answer reveal. A passed stage unlocks the next one and explains why those answers were right, what you achieved, and how the same decision happens in a real company. Passing every stage issues a verifiable credential and a downloadable CTEM cycle report. These are judgment assessments run in the browser: there are no live target machines and no exploitation, because CTEM work is decided in scope, priority, evidence and ownership.
How to apply this
- Clear the Beginner proving ground lab before attempting the Beginner certification exam
- Repeat it after studying the lifecycle pages to test your recall under grading
- Use your graded decisions as a template for your own first CTEM cycle
Common mistakes
- Reading theory only and never practising the decisions
- Treating discovery as the finish line instead of prioritization and validation
- Ending a cycle without a named owner for every fix
Frequently asked questions
Related pages
Beginner CTEM Proving Ground Lab
Beginner CTEM Proving Ground Lab: Assessed CTEM Lab, Free
A free assessed Beginner CTEM lab. Pass all five graded stages. Scope, discover, prioritize, validate, and mobilize exposures across assets, identities, cloud, data, and vendors at Acme Retail, an online retailer.
Free CTEM Certifications
Best Free CTEM Certification: Beginner to Leader
A free CTEM certification path with three levels: Beginner, Practitioner, and Program Leader. Free study material, sample exam, and certificate.
Lifecycle Overview
CTEM Lifecycle: The Five Stages Explained
A practical walkthrough of the five-stage CTEM lifecycle with worked examples, common pitfalls, and links to a deep-dive page for each stage.
What is CTEM?
What is CTEM? Continuous Threat Exposure Management Explained
CTEM (Continuous Threat Exposure Management) explained in plain English: definition, why it exists, and how it works as an operating model, not a tool.
Earn your free CTEM certification.
Study the lifecycle, take a free certification exam and earn a publicly verifiable certificate.
Beginner / Practitioner / Program Leader
Explore certificationsAuthor
LearnCTEM Editorial Team
Practitioners and educators writing plain-English guides on Continuous Threat Exposure Management.
Reviewed by
Senior CTEM Practitioner Panel
Reviewed for accuracy against public CTEM guidance and real-world program experience.
