Validates knowledge of network fundamentals, routing, switching, IP services, security and automation for managing connected systems.
CSSP Analyst Certifications (2026): DoD 8570 Approved List
9 certifications that meet the CSSP Analyst requirement of DoD 8570.
Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.
Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.
Validates practical skills in detecting, investigating and responding to security incidents, including attacker techniques, credential attacks and exploitation.
Validates practical skills in planning, performing and reporting penetration tests, from scoping and reconnaissance to exploitation and post-exploitation.
Validates practical skills in network intrusion detection, including packet-level TCP/IP analysis, tcpdump, Wireshark, Snort, Zeek and network forensics.
Validates hands-on knowledge of securing industrial control systems, including architecture, threats and attacks, communications, hardening, governance and recovery.
Validates knowledge of security operations work, including security concepts, monitoring, host-based analysis, network intrusion analysis and security procedures.
Validates knowledge of identifying, detecting, responding to and recovering from cybersecurity threats using the NIST Cybersecurity Framework.








