Validates knowledge of security governance, executive leadership, program management, core security competencies, and strategic planning, finance and procurement.
1,099Has prerequisites
Approved DoD levels: Basic · Intermediate · Advanced
DoD 8140 Certifications: Security Control Assessor (612)
Independently assesses management, operational and technical security controls to determine how effectively they protect an IT system.
Validates knowledge of authorizing and maintaining secure systems, including scoping, control selection, implementation, assessment and ongoing compliance.
734Has prerequisites
Approved DoD levels: Basic · Intermediate
Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.
810Has prerequisites
Approved DoD levels: Basic · Intermediate · Advanced
Validates knowledge of information security governance, risk management, security program development and management, and incident management.
810Has prerequisites
Approved DoD levels: Basic · Intermediate · Advanced
Validates knowledge of building security into systems from requirements through disposal, using systems engineering and risk management.
599Has prerequisites
Approved DoD levels: Basic · Intermediate · Advanced
Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.
884Has prerequisites
Approved DoD levels: Basic · Intermediate · Advanced
Validates knowledge of cloud architecture, deployment, operations, security, DevOps fundamentals and troubleshooting across multi-vendor cloud environments.
399No prerequisites
Approved DoD levels: Basic · Intermediate
Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.
439No prerequisites
Approved DoD levels: Basic · Intermediate · Advanced
Validates practical skills in planning, performing and reporting penetration tests, from scoping and reconnaissance to exploitation and post-exploitation.
439No prerequisites
Approved DoD levels: Basic · Intermediate
Validates knowledge of security threats, protective controls, risk management and incident response across modern IT environments.
439No prerequisites
Approved DoD levels: Basic · Intermediate
Validates knowledge of enterprise security architecture and engineering, including governance, risk, compliance and security operations.
544No prerequisites
Approved DoD levels: Basic · Intermediate
Validates knowledge of access control, networking, cryptography, Linux and Windows security, cloud security and incident handling.
999No prerequisites
Approved DoD levels: Basic · Intermediate
Validates knowledge of managing security programs, including policy, risk, projects, vendors, SOC management and incident response.
999No prerequisites
Approved DoD levels: Basic · Intermediate · Advanced
Choosing a certification for DoD 8140
What does DoD proficiency mean?
Use the DoD proficiency required for your work role by the employer or supervisor. It describes the work, not the difficulty of a certification.
- Basic: routine work with guidance.
- Intermediate: less routine work with periodic guidance.
- Advanced: complex work with little guidance.
A higher approved level also satisfies lower levels for the same role. Leave the filter at “Any proficiency” if you do not know the requirement.
What does certification approval cover?
A certification meets only the relevant foundational qualification option; on-the-job qualification, environment-specific requirements and continuing development are separate.
Sources and scope
Explicit certification mappings come from the official DoD 8140 qualification matrix v2.1, effective September 19, 2025 and checked October 17, 2026. Rows marked pending OPR validation are excluded. This directory covers the credentials in CertUp, not every qualification option in the matrix.
Confirm the work role, proficiency and accepted qualification with the employer or supervisor before choosing a credential. See the official document library for current policy and guidance.