FAQ
Trust should be verifiable.
Plain-language answers about Trust Credentials, Trust Marks, and how verification works in the Public Business Trust Registry.
What is a small business cybersecurity credential?
A small business cybersecurity credential is a verifiable Trust Badge issued by Legacy Core after review, with live verification in the Public Business Trust Registry. Bronze is earned through the Readiness Assessment and Legacy Core review. Silver and Gold require evidence-based verification and cannot be self-attested. The pathway is aligned with NIST CSF 2.0 and CIS Controls v8 and sized for Main Street, not enterprise audit programs.
What is a Trust Badge?
A Trust Badge is a verifiable credential issued by Legacy Core after pathway review. Each badge links to a live registry listing anyone can check at legacycore.com/verify. Bronze establishes readiness. Silver verifies implementation. Gold demonstrates continued maturity. Silver and Gold cannot be self-attested.
What is the Trust Gap?
The Trust Gap is the distance between how seriously a business takes data protection and what its clients can actually verify. Read the full definition.
How do I show clients my cybersecurity readiness?
Start with a free Trust Audit, complete the Bronze Readiness Assessment and Legacy Core review, and list your business in the Public Business Trust Registry. Share your verification URL or credential ID so clients can confirm status themselves.
What is the difference between a credential and a certification?
A credential is a reviewed, verifiable Trust Badge with a live registry listing Legacy Core issues after pathway review. Enterprise compliance frameworks (SOC 2, ISO 27001) are separate programs built for organizations with dedicated security teams. Legacy Core is aligned with NIST CSF 2.0 + CIS Controls v8. It does not claim to be those frameworks or legal compliance.
How do I verify a business?
Use the Public Business Trust Registry at legacycore.com/verify. Search by business name or enter a credential ID from a Trust Badge. Every verified listing shows tier, status, and issued date from the live registry.
Do I have to buy cybersecurity services or software to earn a credential?
No. Legacy Core does not require businesses to purchase cybersecurity implementation services or a specific security product to earn a credential. You may work with qualified providers of your choice, including Alliance Partners. Providers may support readiness. Legacy Core determines whether the credential requirements have been met.
Is Legacy Core a monitoring product or managed security provider?
No. Legacy Core is a credentialing authority. It reviews readiness and issues Trust Badges. Alliance Partners and other providers implement security. The Public Business Trust Registry lets third parties check credential status. Legacy Core is not an MSP, MSSP, monitoring platform, or vulnerability scanner.
Verify a Business
Ready to earn your badge? Get Credentialed