Validates knowledge of security threats, protective controls, risk management and incident response across modern IT environments.
Certifications Approved for DoD 8570 (2026)
29 certifications on the DoD 8570 baseline list, with the categories and levels each one covers.
Validates knowledge of network fundamentals, routing, switching, IP services, security and automation for managing connected systems.
Validates foundational IT support knowledge across hardware, operating systems, networking, security and troubleshooting common technical problems.
Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.
Validates knowledge of networking concepts, implementation, operations, security and troubleshooting for managing and supporting modern networks.
Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.
Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.
Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.
Validates knowledge of information security governance, risk management, security program development and management, and incident management.
Validates practical skills in implementing access controls, monitoring risk, responding to incidents and securing networks, systems and applications.
Validates knowledge of securing cloud environments, including architecture, data, platforms, applications, operations and cloud legal and compliance requirements.
Validates knowledge of enterprise security architecture and engineering, including governance, risk, compliance and security operations.
Validates practical skills in detecting, investigating and responding to security incidents, including attacker techniques, credential attacks and exploitation.
Validates knowledge of access control, networking, cryptography, Linux and Windows security, cloud security and incident handling.
Validates knowledge of authorizing and maintaining secure systems, including scoping, control selection, implementation, assessment and ongoing compliance.
Validates practical skills in planning, performing and reporting penetration tests, from scoping and reconnaissance to exploitation and post-exploitation.
Validates knowledge of digital forensics and incident response, including memory forensics, timelines, Windows artifacts and enterprise investigations.
Validates knowledge of building security into software, from requirements and design to testing, deployment and supply chain.
Validates practical skills in network intrusion detection, including packet-level TCP/IP analysis, tcpdump, Wireshark, Snort, Zeek and network forensics.
Validates knowledge of digital forensics, including evidence handling and analysis of disks, operating systems, networks, cloud and mobile.
Validates hands-on knowledge of securing industrial control systems, including architecture, threats and attacks, communications, hardening, governance and recovery.
Validates knowledge of designing security architecture, including governance, risk, architecture modeling, infrastructure security and identity and access management.
Validates knowledge of security governance, executive leadership, program management, core security competencies, and strategic planning, finance and procurement.
Validates knowledge of building security into systems from requirements through disposal, using systems engineering and risk management.
Validates knowledge of security operations work, including security concepts, monitoring, host-based analysis, network intrusion analysis and security procedures.
Validates knowledge of security leadership, including operational management, systems lifecycle, risk, security operations, contingency planning and legal compliance.
Validates knowledge of managing security programs, including policy, risk, projects, vendors, SOC management and incident response.
Validates knowledge of enterprise defense, including hardening, detection, network and identity analysis, incident response and malware triage.
Validates knowledge of identifying, detecting, responding to and recovering from cybersecurity threats using the NIST Cybersecurity Framework.




























