Frequently Asked Questions (FAQS)

You can use WhatsApp Chat, the enquiry form or the following email addresses:

• General: geral@behaviour-group.com
• Training: training@behaviour-group.com
• Advisory and Auditing: consulting@behaviour-group.com
• Examinations: exams@behaviour-group.com
• Certification and Recertification: certification@behaviour-group.com

You can subscribe using the options in the website header or footer, or via the newsletter subscription page.

Policies, terms and regulations are available in the website footer under Policies and Terms.

It depends on the programme. Behaviour’s own certifications are issued by Behaviour through Behaviour Certification Services. Certifications awarded by external organisations are issued by the awarding body identified on the course page, such as PeopleCert, including AXELOS programmes where applicable, or EC-Council.

It is Behaviour’s certification of persons service. Behaviour is the legally responsible entity. This service manages certification schemes, assesses requirements, makes certification decisions and, where applicable, manages maintenance, recertification and transition.

No. For partner certifications, the issuing body is the external organisation identified on the course page. This distinction applies, for example, to PeopleCert certifications, including AXELOS programmes where applicable, and EC-Council certifications.

Check the issuing body identified on the course page. Behaviour certifications are issued by Behaviour through Behaviour Certification Services. Partner certifications are issued by the named external organisation.

Refer to the information published on Behaviour’s official channels and the relevant course page. Behaviour does not claim partnerships or affiliations that have not been explicitly identified.

Verify the information through Behaviour’s official channels and the relevant course page. Automated systems may combine sources and present incorrect associations, particularly concerning certification issuing bodies or partnerships.

Yes. Behaviour provides training and services to professionals and organisations in different countries, with a particular focus on Portuguese-speaking countries and Europe. Available languages depend on the course or service.

Training develops knowledge and skills for professional practice. Certification is a separate process requiring assessment and fulfilment of the applicable scheme requirements. Attending training does not, in itself, constitute certification.

Protecting privacy and personal data is a Behaviour commitment. Please see our privacy policy for information on how your data is processed.

Yes. The information provided at registration is used to organise the training. To update your details, email the team responsible for your registration.

Keep your email address up to date so that you receive examination results and can manage certification and recertification. For these processes, we recommend using a personal email address that you will retain access to even if you change employer.

Changes to the email address associated with an examination or certification are subject to identity verification by Behaviour.

Bank transfer and credit card. Additional charges apply to credit card payments.

Yes. Provide your tax identification number (NIF) and the remaining billing details on the registration or order form. The invoice is issued before you send proof of payment.

Yes. A fee is charged for each statement issued or for reissuing statements, certificates or diplomas. Issuance depends on validation of the relevant file or archived record in accordance with the Data Retention Policy. Statements confirming course attendance or attendance hours are issued only after documentary verification.

You can leave a message via WhatsApp Chat, the enquiry form or the responsible team’s email address. We will reply on the next working day.

Yes. Behaviour is a training provider certified by DGERT. Its management system is also aligned with the principles of ISO 9001 and NP 4512.

• Information Security;
• Compliance;
• Cybersecurity and Digital Forensics;
• Business Continuity;
• Artificial Intelligence;
• Auditing and Quality;
• Project and Risk Management;
• Privacy and Data Protection;
• Compliance and Resilience;
• Anti-Corruption and Governance;
• And more

Yes. We can develop or adapt training resources to the objectives agreed with the client. Unless otherwise agreed in writing, training resources developed by Behaviour remain its property and may be registered with IGAC. This provision does not cover the client’s own information, documents or content.

Our approach combines an understanding of requirements with their practical application. Programmes emphasise working methods, analysis of situations, decision-making and production of deliverables where relevant to the course.

Depending on the course, activities may include guided exercises, scenarios, case studies, operational examples, preparation of deliverables, games and discussion of decisions. The type and extent of practical work are adapted to the level and objectives of the training.

Pre-reading or independent study may be required before, during or after the training, including exercises, consolidation of knowledge and assessment preparation. Any tasks to be completed before the course starts are communicated in the joining instructions. For live online training, preparation may also be recommended to help participants get the most from the sessions.

Ensure that you have a stable internet connection, working audio and video equipment, and a suitable environment in which to participate. Set aside time for exercises and discussions. Any additional requirements, such as software, document templates or reading materials, will be stated in the joining instructions.

This depends on the course and level. Any mandatory prerequisites are identified on the course page. These are distinct from recommendations concerning knowledge or experience that help participants benefit from the training.

Our training portfolio is organised by standards and frameworks, where applicable, as well as by competency area and professional role. This helps link courses to job functions and the needs of those involved in implementation, operations and auditing.

Training develops working methods and practical skills through exercises, decisions and deliverables, where applicable. Assessment and certification follow the requirements of the relevant scheme. They are connected but distinct: participating in training does not replace the examination or other certification requirements.

No. Training aims to develop knowledge and the ability to apply it professionally, beyond preparation for assessment. Where an examination or certification is available, the terms are specified on the course page.

Behaviour’s own programmes and resources are developed by Behaviour and registered with IGAC.

Partners’ programmes and resources are developed by the respective partners.

The materials identify the organisation to which they belong.

Yes. Courses and resources are updated to reflect developments in relevant standards, frameworks, regulations and bodies of knowledge. Having attended an earlier edition does not, in itself, remove the need for further learning when those references or their application change. Consult the references listed on each course page.

Consult the Course catalogue by subject area and the information on individual course pages and their scheduled editions.

You can use the enquiry form, the course selection support form or email training@behaviour-group.com.

When you enquire, you will receive the available information about the course, dates, delivery format, price and registration. Once your registration is confirmed, you will receive the operational details, normally around one week before the course starts.

We provide classroom-based, live online and e-learning training. The delivery format is stated on each course page.

Training and materials may be available in Portuguese and English. As resources are updated, one language version may not yet be available for a particular course edition.

For programmes using partner resources, materials are provided in English.

We use Cisco Webex and Behaviour’s training platform. You do not need to create an account to use Cisco Webex. Behaviour creates your account for its training platform; you must change your password when you first sign in.

• Online: a computer, stable internet connection, web browser, webcam, microphone and any standards specified at registration and in the joining instructions.
• Classroom-based: a computer or tablet to access the resources, together with any standards specified at registration and in the joining instructions.

For live online training, access details are sent in accordance with the joining instructions or other operational communications. The session link is sent beforehand and may, where necessary, be provided up to 30 minutes before the session. For e-learning, access is provided once registration and the applicable administrative checks are complete.

Resources are available online from the first day of training. Access remains available throughout the course and up to the maximum period defined for that course, or for another period requested and agreed with the company.

Yes, provided you meet the requirements specified for online training.

Follow the registration process. You must submit a digitally signed registration form and complete the applicable procedures: payment for individuals, or order confirmation and a purchase order where applicable for companies, in accordance with the contracted terms.

Whether the examination and certification are included depends on the course and the contracted terms. Refer to the commercial information sent to you or your company, the course page and the page for the particular course edition.

At Behaviour, training and related services are exempt from VAT under the special provisions of the Portuguese VAT Code.

• Postponement: up to 45 days before the start date, subject to the applicable terms.
• Transfer of registration to another participant: up to 7 days before the start date, where applicable.
• Cancellation: any amount paid is handled in accordance with the commercial and contractual terms. Where provided for, the amount may be applied to another course within the specified period.

Send your request to training@behaviour-group.com.

A minimum attendance rate of 80% is required. Issuance of the certificate also depends on completion of the applicable administrative procedures, including receipt of the training evaluation and settlement of payment.

You may request a statement of attendance by emailing training@behaviour-group.com. Issuance is subject to documentary verification and the applicable evaluation and payment procedures.

A certificate of attendance confirms participation in training and compliance with the attendance and administrative requirements. It does not demonstrate that a certification examination has been passed.

A certification diploma confirms that the scheme requirements have been met, including passing the examination and, where applicable, verification of experience and supporting documents.

Some certifications also include a digital badge.

After completion of the course evaluation process, which depends on receiving evaluations from all learners who attended that course edition.

The materials are confidential and intended for personal use under the access conditions defined for each resource. Recording sessions, copying or photographing content without authorisation, or sharing or transferring materials to third parties is not permitted.

Behaviour uses Cisco Webex and its training platform in accordance with the GDPR and the data minimisation principle. Where providers or processing activities have an international dimension, the applicable contractual, technical and organisational measures are adopted. Please refer to the privacy policy for further information.

When it is necessary to reschedule training, Behaviour proposes a new date to registered participants. The applicable terms are those communicated during registration and contracting.

We endeavour to maintain scheduled dates. Insufficient participant numbers or circumstances beyond Behaviour’s control may make rescheduling necessary. When a course is already fully booked, another date may be offered to those wishing to register.

You can submit a complaint through the Portuguese Complaints Book (Livro de Reclamações) or the official channels identified in the joining instructions and on the first day of training, including training@behaviour-group.com. Once received, the complaint is recorded, assessed and answered in accordance with the applicable procedure.

Training documents must be signed using a qualified electronic signature. You may use the relevant Portuguese facilities or an equivalent signature issued by a qualified trust service provider in the EU/EEA.

They are specialists with practical experience in consultancy, auditing, management, implementation and training. They share examples, case studies and good practices to connect course content with professional reality.

No. Whether an examination is available depends on the course and the organisation responsible for certification. Check its inclusion and terms in the commercial proposal and on the course page.

The examination format, date and deadline depend on the examination and the responsible organisation. Examinations may be held online or in person, subject to the applicable conditions. Consult the course terms and the instructions you receive to confirm the deadline and the date from which it is calculated. Do not assume that the period starts on the last day of training. The deadline for taking the examination is separate from the subsequent deadline for applying for and completing certification after passing.

It depends on the examination. Where reference materials are permitted, only those expressly authorised in the instructions may be used. The rules are communicated before the session and must be followed in full.

Report the problem immediately and follow the invigilator’s instructions. The incident is handled under Behaviour’s or the partner’s examination procedure and may involve recording the incident and rescheduling the examination, where permitted.

For many courses, yes, provided you meet the examination deadline. Request a booking in advance by emailing exams@behaviour-group.com, in accordance with the deadlines communicated.

Examinations may be available in Portuguese and English, depending on the programme. Some partner examinations are not available in Portuguese.

Yes. Online examinations follow the invigilation procedures and integrity rules established by Behaviour or the responsible partner. The applicable conditions are communicated in the examination instructions.

• A computer with a stable internet connection;
• A working webcam and microphone;
• A quiet environment without interruptions;
• A valid identity document.

Have a valid identity document and only those reference materials authorised in the specific examination instructions.

Before the session, you will receive the examination rules of Behaviour or the responsible partner. Using unauthorised materials, copying, recording or disclosing examination content is prohibited.

To request an examination booking, please complete the online examination booking form, providing two preferred dates and time slots in order of preference and observing the applicable deadlines. Following a review of your request, you will receive confirmation or further instructions by email.

Deadlines are communicated in the proposal or quotation, the joining instructions, during training and in the post-training email.

The duration depends on the examination and is stated on the course page, in the joining instructions and in the examination booking email.

• Send your request to exams@behaviour-group.com;
• Notify us of your unavailability at least 3 working days in advance;
• Propose 2 alternative dates.

Rescheduling is subject to charges. Contact exams@behaviour-group.comfor details of the applicable conditions.

A new booking will be subject to an additional charge and the applicable examination conditions. Contact the examinations team to make your request.

Yes. Where registration includes a second-shot — an additional examination attempt — you may book it under the terms and deadlines communicated. Where no second-shotentitlement is included, an additional fee applies for a further attempt. Refer to the proposal or commercial terms received by email.

In Behaviour examinations, answers are identified by a candidate code, without disclosing the candidate’s name to the marker. The certification decision depends on the examination result and verification of the remaining requirements under the applicable scheme.

The result may be available at the end of the examination or sent later by email, within two months of the examination, depending on the examination and its provider. The email address provided for the examination is used.

After passing, request the initiation of the process using the online certification form. You will receive the documents and instructions for formalising your application by email. Complete and sign the applicable documents, including the Behaviour Code, and send them to certification@behaviour-group.com. Professional experience and verification by a referee are required only for levels that specify them. Certification is awarded following a favourable assessment of all requirements. Whether the process is included in the contracted price depends on the registration terms.

You have six months from the date of the examination you passed to apply for and complete your initial Behaviour certification without additional late fees. After this period, completion is subject to administrative late fees determined by the time elapsed and communicated by Behaviour Certification Services, up to a maximum of three years from the same examination date. If the process has not been completed after three years, new Behaviour training and a new examination must be passed, regardless of the previous edition or version, even where the reference standard has not changed. Completing the online form merely initiates the process: it does not constitute completion of certification.

Certification is awarded against the standard, framework and version or edition identified within its scope. This identifies what was assessed and certified. An update to the reference standard does not automatically update the credential: the previous certification retains its original scope and remains subject to its own validity and transition rules.

A verifier is a professional whose identity and contact details can be verified and who has direct knowledge of the work declared. They confirm the nature, duration and relevance of the experience, as well as the candidate’s role. The verifier may be a supervisor, manager, colleague, client contact, partner, consultant or another professional who has overseen the activities. A verifier is required only for certification levels with professional experience requirements. For Associate levels, a verifier is not required to confirm experience.

Certification matters are handled by email. Use the address associated with your examination or application. If you no longer have access to that address, request an update, stating both the old and new email addresses. Behaviour will verify your identity before making the change. We recommend using a personal email address to which you will retain access.

Behaviour credentials are professional certifications based on Behaviour’s own schemes, designed for use in national and international professional contexts.

The schemes are designed and operated in line with good practices for certification of persons, impartiality and quality of assessment, including the principles of ISO/IEC 17024.

The credential is designed to be understood and used in international professional contexts by identifying the certification domains, assessment and scheme rules. Acceptance depends on the employer, the role and the requirements of the context in which it is presented.

Once the Behaviour scheme requirements have been met, including passing the examination, a certification diploma and, where applicable, a digital badge are issued.

They are issued by Behaviour through Behaviour Certification Services.

They are sent by email after the certification process has been validated. Timing depends on receipt of all required documents and verification of the scheme requirements. A badge is issued when provided for by the programme.

To request verification from Behaviour, the request must be submitted by the certified professional or by a third party with verifiable authorisation. Email certification@behaviour-group.com, identifying the credential and any available details, such as its number. Behaviour will confirm only the credential’s status, in accordance with the GDPR and the applicable scheme.

Yes. The applicable scheme provides formal complaints and appeals procedures. Send your reasoned request to certification@behaviour-group.com, identifying the examination or credential.

The Behaviour Code sets out certified professionals’ obligations and safeguards trust in the credential. Acceptance of the Code is a certification requirement and underpins decisions on awarding, maintaining and revoking certification.

Yes. Breach of the contract or Code of Ethics, or failure to meet maintenance requirements, may result in refusal of certification at the application stage or revocation after it has been awarded, in accordance with the applicable scheme.

Yes. You may share it on LinkedIn and other professional networks. Where applicable, the digital badge includes dedicated sharing and verification features.

The Behaviour Code must be signed using a qualified electronic signature. You may use the relevant Portuguese facilities or an equivalent signature issued by a qualified trust service provider in the EU/EEA. Other documents must be signed in accordance with the instructions of Behaviour Certification Services (BCS) and the applicable scheme. Where handwritten signatures are permitted for other documents, that option does not apply to the Behaviour Code.

For Associate, Auditor, Implementer, Lead Auditor and Lead Implementer levels, certification is valid for three years. The recertification request must be initiated at least six months before expiry and completed before the expiry date. Behaviour sends email reminders between six and four months before expiry. Certified professionals remain responsible for keeping their contact details up to date and meeting the deadlines. For other levels not requiring experience that are subject to the standard-edition update regime, validity ends 12 months after publication of the next edition. Transition must be completed by that date, subject to the safeguards applicable to previously issued diplomas.

You can initiate your request by emailing certification@behaviour-group.com or using the online recertification form. Following a preliminary eligibility assessment, the process moves to invoicing. Once payment has been confirmed, you will receive instructions and the required documents. You must submit your certification maintenance record, the evidence required for your level and a renewed acceptance of the Behaviour Code. For Associate levels, training, professional development and the other applicable conditions are verified, without any requirement for professional experience or verification by a referee. For levels requiring experience, that experience is also verified. Renewal is subject to a favourable decision by Behaviour Certification Services.

Yes, for levels subject to annual maintenance requirements. You must meet the applicable credits and retain supporting evidence. For example, under the ISO 27001 scheme, Associate levels must complete 10 CPD credits of training and professional development each year, with no work credits required. Auditor and Implementer require 10 CPD credits for professional work and 10 for training and professional development. Lead Auditor and Lead Implementer require 10 CPD credits for professional work and 10 for training and professional development. One CPD credit equals one hour of relevant activity. Minimums are assessed for each year of the certification cycle. The maintenance record must be kept up to date, but this does not, in itself, require annual submission to Behaviour Certification Services.

No. Recertification renews validity while retaining the certification level and version or edition. Updating to a new edition of the applicable standard or framework is handled through a separate transition process.

Transition updates the reference edition of an existing certification while retaining the awarded level. It is separate from recertification. It requires the Behaviour training specified by Behaviour Certification Services for the update, passing the applicable new examination and completing the transition application. The formalisation process is included in the training and examination pathway. Applications are submitted through the online form for transition to a new edition. Updating an Auditor credential does not automatically update an Implementer credential, or vice versa.

You do not need to repeat your original training for recertification provided you meet the maintenance requirements: continuing professional development, relevant experience where required, and documentary evidence for the applicable period.

Recertification retains the level and version or edition of the credential. Updating to a new edition follows the transition process, which has separate requirements.

Recertification:

External training may count towards continuing professional development credits where it is documented, verifiable and relevant to the scope of the certification.

You may be asked to provide the certificate, dates, duration, issuing organisation and other information required for validation.

Transition:

External training and professional experience do not replace the Behaviour training or the new examination required for transition. Acceptance of an activity for maintenance credits does not make it an alternative to the transition pathway.

On the expiry date, the certification ceases to be valid. Neither the diploma nor the badge may continue to be presented as valid credentials.

Under schemes that allow reinstatement after expiry, you have six months to complete the entire process:

• If the examination previously taken relates to the current version of the body of knowledge, you must pass the reinstatement examination and meet the remaining recertification requirements.
• If it relates to an earlier version, you must complete the applicable Behaviour update training, pass the examination currently in force and meet the remaining recertification requirements.

Submitting a request, making a payment, taking an examination, starting training or making another attempt does not extend the maximum six-month period.

Certification becomes valid again only after a favourable decision by Behaviour Certification Services.

After six months, certification lapses permanently and cannot be reinstated.

Reinstatement may be permitted only within the additional period provided for by the applicable scheme.

You must meet the requirements, pay the applicable fee and complete the process within that period. Validity is restored only following a favourable decision.

After that deadline, the credential can no longer be reinstated.

The Behaviour Code must be signed using a qualified electronic signature. You may use the relevant Portuguese facilities or an equivalent signature issued by a qualified trust service provider in the EU/EEA. Other documents must be signed in accordance with the instructions of Behaviour Certification Services (BCS) and the applicable scheme. Where handwritten signatures are permitted for other documents, that option does not apply to the Behaviour Code.

Yes. We organise In-Companytraining, either following the public course syllabus or adapted to the organisation’s context, processes and objectives, in accordance with the course framework and the client’s formal request.

Yes. For closed-group courses, we can develop content and tailor scenarios and exercises to sectors such as banking, energy, healthcare, manufacturing, retail and the public sector. Adaptation depends on the client’s formal request.

Yes. We offer volume discounts for multiple employee registrations and arrangements for annual plans covering several courses. Applicable terms are specified in the commercial proposal.

HR teams receive participation, attendance and training evaluation reports by email, which may support internal records and audits. Examination results and information on certification processes are sent exclusively to the examinee or applicant. The company should obtain this information directly from the employee.

We provide post-training evaluation metrics and, where learners and companies respond, follow-up metrics at six and twelve months. This information helps assess how learning is applied and can be related to the company’s internal indicators to evaluate training impact and return on investment.

Yes. Course content is updated in line with the standards and frameworks relevant to each course, including ISO standards, legislation and other good practices. Training supports understanding and application of the requirements in professional settings.

The trainer and learners sign confidentiality undertakings covering the processes, cases and data shared. For learners, the agreement appears on the reverse of the registration form.

We provide advisory services in Governance, Risk & Compliance (GRC), Cybersecurity, Operational Resilience, Privacy and Digital Compliance. We support decision-making, implementation of requirements and continuous improvement.

We carry out audits and assessments of maturity, compliance and controls against standards, regulatory requirements and good practices. Our work is based on defined criteria and supported by evidence.

Email consulting@behaviour-group.com, specifying the objective, scope, sector, organisation size and desired timeframe.

• Objective and scope: standard, regulation, process or technology;
• Business units or services included, and locations;
• Desired schedule and available delivery periods;
• Point of contact and key stakeholders ;
• Current context: policies, previous audits and existing tools;
• Confidentiality restrictions, access constraints or internal requirements.

Services may be provided remotely, on site or in a hybrid format, depending on the scope, evidence requirements and the organisation’s needs.

Depending on the scope, deliverables may include an executive report, diagnostic assessment, maturity assessment, prioritised action plan and recommendations. Where appropriate, they may also include document templates and governance tools, such as policies, procedures, matrices and records.

The work includes the audit plan, criteria and method, collection and validation of evidence, findings and the final report, with recommendations and priorities. Findings may include conformities, nonconformities and observations.

Audits follow the principles of independence and objectivity. Risks of conflicts of interest are assessed and addressed, for example through separation of responsibilities or teams, defining the audit scope or declining the engagement where necessary.

Yes. Confidentiality undertakings covering the information, processes and data shared are established through non-disclosure agreements (NDAs). Information access and retention arrangements are also defined.

Yes. As part of our advisoryservices, we support the preparation and improvement of management systems and controls, including corrective actions, organisation of evidence and internal simulations. This support respects the separation required from independent auditing.

Timescales depend on the scope and the availability of evidence and stakeholders. Once the necessary information has been collected, a plan is proposed with phases, timetable and delivery milestones.

Yes, where required by the scope of work, including the supply chain, IT services and cloud service providers. Access depends on client authorisation and the applicable confidentiality requirements.

An evidence collection and validation process is defined, which may include a controlled repository, temporary access rights, an evidence register and a request log. The aim is to minimise the data used and ensure traceability.