Validates knowledge of securing cloud environments, including architecture, data, platforms, applications, operations and cloud legal and compliance requirements.
DoD 8570 IAT Level I Certifications
Compare certification options for IAT Level I in legacy DoD 8570 job requirements, including costs and prerequisites. Confirm the employer’s current DoD 8140 requirement.
Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.
Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.
Validates foundational IT support knowledge across hardware, operating systems, networking, security and troubleshooting common technical problems.
Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.
Validates knowledge of networking concepts, implementation, operations, security and troubleshooting for managing and supporting modern networks.
Validates knowledge of security threats, protective controls, risk management and incident response across modern IT environments.
Validates knowledge of enterprise security architecture and engineering, including governance, risk, compliance and security operations.
Validates knowledge of enterprise defense, including hardening, detection, network and identity analysis, incident response and malware triage.
Validates practical skills in detecting, investigating and responding to security incidents, including attacker techniques, credential attacks and exploitation.
Validates hands-on knowledge of securing industrial control systems, including architecture, threats and attacks, communications, hardening, governance and recovery.
Validates knowledge of access control, networking, cryptography, Linux and Windows security, cloud security and incident handling.
Validates practical skills in implementing access controls, monitoring risk, responding to incidents and securing networks, systems and applications.
Understanding IAT Level I requirements
These legacy categories do not have a one-to-one crosswalk with 8140 work roles. Ask the employer for the current work-role code, proficiency, accepted credentials and deadline to qualify.
IAT
Information Assurance Technical: technical implementation and support of information systems.
IAM
Information Assurance Management: managing information assurance programs and responsibilities.
IASAE
Information Assurance System Architecture and Engineering: designing and engineering secure systems.
CSSP
Cybersecurity Service Provider: defensive analysis, infrastructure support, incident response, auditing and management.
Sources and scope
Categories use the 2019 DoD 8570 baseline chart and retained later approval evidence for CCSP, PenTest+ and CCISO. SecurityX was listed under its former CASP+ name, CGRC as CAP, and Cisco Cybersecurity Associate as CCNA Cyber Ops. Retired credentials without a current CertUp profile are omitted.
The current CCNA is not an unrestricted 8570 baseline option. A limited waiver temporarily accepts it for designated personnel who held CCNA Security before February 24, 2020. Those exceptions are not listed as general options above.
This is a reference for interpreting legacy categories, not a current 8140 work-role mapping. In IAT and IAM, certifications at higher levels also meet lower levels. IASAE and CSSP membership follows the listed category.
Confirm the work role, proficiency and accepted qualification with the employer or supervisor before choosing a credential. See the official document library for current policy and guidance.












