Validates knowledge of security governance, executive leadership, program management, core security competencies, and strategic planning, finance and procurement.
1,099Has prerequisites
DoD 8140 Certifications
Compare certifications mapped in the official DoD matrix. Choose a work role to find the options relevant to your employer’s requirements.
Validates knowledge of network fundamentals, routing, switching, IP services, security and automation for managing connected systems.
300No prerequisites
Validates knowledge of enterprise network architecture, virtualization, infrastructure, assurance, security and automation for designing and troubleshooting networks.
700No prerequisites
Validates knowledge of securing cloud environments, including architecture, data, platforms, applications, operations and cloud legal and compliance requirements.
734Has prerequisites
Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.
1,050Has prerequisites
Validates knowledge of identifying, detecting, responding to and recovering from cybersecurity threats using the NIST Cybersecurity Framework.
367.50No prerequisites
Validates knowledge of authorizing and maintaining secure systems, including scoping, control selection, implementation, assessment and ongoing compliance.
734Has prerequisites
Validates knowledge of digital forensics, including evidence handling and analysis of disks, operating systems, networks, cloud and mobile.
750Has prerequisites
Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.
810Has prerequisites
Validates knowledge of information security governance, risk management, security program development and management, and incident management.
810Has prerequisites
Validates knowledge of designing security architecture, including governance, risk, architecture modeling, infrastructure security and identity and access management.
599Has prerequisites
Validates knowledge of building security into systems from requirements through disposal, using systems engineering and risk management.
599Has prerequisites
Validates knowledge of security leadership, including operational management, systems lifecycle, risk, security operations, contingency planning and legal compliance.
599Has prerequisites
Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.
884Has prerequisites
Validates foundational IT support knowledge across hardware, operating systems, networking, security and troubleshooting common technical problems.
548No prerequisites
Validates knowledge of cloud architecture, deployment, operations, security, DevOps fundamentals and troubleshooting across multi-vendor cloud environments.
399No prerequisites
Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.
439No prerequisites
Validates knowledge of networking concepts, implementation, operations, security and troubleshooting for managing and supporting modern networks.
399No prerequisites
Validates practical skills in planning, performing and reporting penetration tests, from scoping and reconnaissance to exploitation and post-exploitation.
439No prerequisites
Validates knowledge of security threats, protective controls, risk management and incident response across modern IT environments.
439No prerequisites
Validates knowledge of enterprise security architecture and engineering, including governance, risk, compliance and security operations.
544No prerequisites
Validates knowledge of building security into software, from requirements and design to testing, deployment and supply chain.
734Has prerequisites
Validates knowledge of security operations work, including security concepts, monitoring, host-based analysis, network intrusion analysis and security procedures.
300No prerequisites
Validates knowledge of enterprise defense, including hardening, detection, network and identity analysis, incident response and malware triage.
999No prerequisites
Validates knowledge of digital forensics and incident response, including memory forensics, timelines, Windows artifacts and enterprise investigations.
999No prerequisites
Validates practical skills in network intrusion detection, including packet-level TCP/IP analysis, tcpdump, Wireshark, Snort, Zeek and network forensics.
999No prerequisites
Validates practical skills in detecting, investigating and responding to security incidents, including attacker techniques, credential attacks and exploitation.
999No prerequisites
Validates hands-on knowledge of securing industrial control systems, including architecture, threats and attacks, communications, hardening, governance and recovery.
999No prerequisites
Validates knowledge of access control, networking, cryptography, Linux and Windows security, cloud security and incident handling.
999No prerequisites
Validates knowledge of managing security programs, including policy, risk, projects, vendors, SOC management and incident response.
999No prerequisites
Validates foundational knowledge of security principles, governance, access control, network and cloud security, and security operations.
249No prerequisites
Validates practical skills in implementing access controls, monitoring risk, responding to incidents and securing networks, systems and applications.
384Has prerequisites
Choosing a certification for DoD 8140
Which work role should you select?
Use the work-role code supplied by your employer or supervisor. Select that role above to compare its mapped certifications, then narrow the results if a specific DoD proficiency is required.
What does DoD proficiency mean?
Use the DoD proficiency required for your work role by the employer or supervisor. It describes the work, not the difficulty of a certification.
- Basic: routine work with guidance.
- Intermediate: less routine work with periodic guidance.
- Advanced: complex work with little guidance.
A higher approved level also satisfies lower levels for the same role. Leave the filter at “Any proficiency” if you do not know the requirement.
What does certification approval cover?
A certification meets only the relevant foundational qualification option; on-the-job qualification, environment-specific requirements and continuing development are separate.
Sources and scope
Explicit certification mappings come from the official DoD 8140 qualification matrix v2.1, effective September 19, 2025 and checked October 17, 2026. Rows marked pending OPR validation are excluded. This directory covers the credentials in CertUp, not every qualification option in the matrix.
The November 2025 Cyber Enabler memo provides broader interim options for civilians and Service members. The September 2026 supplemental guidance also protects some qualifications tied to an earlier matrix. These provisions are not additional explicit work-role mappings in this list.
Confirm the work role, proficiency and accepted qualification with the employer or supervisor before choosing a credential. See the official document library for current policy and guidance.