CSSP Auditor Certifications (2026): DoD 8570 Approved List

5 certifications that meet the CSSP Auditor requirement of DoD 8570.

Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.

810AdvancedHas prerequisites
CompTIA CySA+ credential artwork

CompTIA CySA+

CompTIA · Exam CS0-004

Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.

439IntermediateNo prerequisites
Certified Ethical Hacker credential artwork

Certified Ethical Hacker (CEH)

EC-Council · Exam 312-50

Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.

1,050IntermediateHas prerequisites
CompTIA PenTest+ credential artwork

CompTIA PenTest+

CompTIA · Exam PT0-003

Validates practical skills in planning, performing and reporting penetration tests, from scoping and reconnaissance to exploitation and post-exploitation.

439IntermediateNo prerequisites
CyberSec First Responder credential artwork

CyberSec First Responder (CFR)

CertNexus · Exam CFR-410

Validates knowledge of identifying, detecting, responding to and recovering from cybersecurity threats using the NIST Cybersecurity Framework.

367.50IntermediateNo prerequisites