Certifications Approved for DoD 8570 (2026)

29 certifications on the DoD 8570 baseline list, with the categories and levels each one covers.

CompTIA Security+ credential artwork

CompTIA Security+

CompTIA · Exam SY0-701

Validates knowledge of security threats, protective controls, risk management and incident response across modern IT environments.

439EntryNo prerequisites

Validates knowledge of network fundamentals, routing, switching, IP services, security and automation for managing connected systems.

300IntermediateNo prerequisites
CompTIA A+ credential artwork

CompTIA A+

CompTIA · Exam 220-1201 / 220-1202

Validates foundational IT support knowledge across hardware, operating systems, networking, security and troubleshooting common technical problems.

548EntryNo prerequisites
CompTIA Network+ credential artwork

CompTIA Network+

CompTIA · Exam N10-009

Validates knowledge of networking concepts, implementation, operations, security and troubleshooting for managing and supporting modern networks.

399EntryNo prerequisites

Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.

810AdvancedHas prerequisites
CompTIA CySA+ credential artwork

CompTIA CySA+

CompTIA · Exam CS0-004

Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.

439IntermediateNo prerequisites
Certified Ethical Hacker credential artwork

Certified Ethical Hacker (CEH)

EC-Council · Exam 312-50

Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.

1,050IntermediateHas prerequisites

Validates practical skills in implementing access controls, monitoring risk, responding to incidents and securing networks, systems and applications.

384IntermediateHas prerequisites

Validates knowledge of securing cloud environments, including architecture, data, platforms, applications, operations and cloud legal and compliance requirements.

734AdvancedHas prerequisites
CompTIA SecurityX credential artwork

CompTIA SecurityX

CompTIA · Exam CAS-005

Validates knowledge of enterprise security architecture and engineering, including governance, risk, compliance and security operations.

544AdvancedNo prerequisites

Validates practical skills in detecting, investigating and responding to security incidents, including attacker techniques, credential attacks and exploitation.

999IntermediateNo prerequisites

Validates knowledge of access control, networking, cryptography, Linux and Windows security, cloud security and incident handling.

999IntermediateNo prerequisites
CompTIA PenTest+ credential artwork

CompTIA PenTest+

CompTIA · Exam PT0-003

Validates practical skills in planning, performing and reporting penetration tests, from scoping and reconnaissance to exploitation and post-exploitation.

439IntermediateNo prerequisites

Validates knowledge of digital forensics and incident response, including memory forensics, timelines, Windows artifacts and enterprise investigations.

999IntermediateNo prerequisites

Validates practical skills in network intrusion detection, including packet-level TCP/IP analysis, tcpdump, Wireshark, Snort, Zeek and network forensics.

999IntermediateNo prerequisites

Validates knowledge of digital forensics, including evidence handling and analysis of disks, operating systems, networks, cloud and mobile.

750IntermediateHas prerequisites

Validates knowledge of security governance, executive leadership, program management, core security competencies, and strategic planning, finance and procurement.

1,099AdvancedHas prerequisites
CCNA Cybersecurity credential artwork

CCNA Cybersecurity

Cisco · Exam 200-201 CCNACBR

Validates knowledge of security operations work, including security concepts, monitoring, host-based analysis, network intrusion analysis and security procedures.

300EntryNo prerequisites

Validates knowledge of managing security programs, including policy, risk, projects, vendors, SOC management and incident response.

999AdvancedNo prerequisites

Validates knowledge of enterprise defense, including hardening, detection, network and identity analysis, incident response and malware triage.

999IntermediateNo prerequisites
CyberSec First Responder credential artwork

CyberSec First Responder (CFR)

CertNexus · Exam CFR-410

Validates knowledge of identifying, detecting, responding to and recovering from cybersecurity threats using the NIST Cybersecurity Framework.

367.50IntermediateNo prerequisites