IAM Level II Certifications (2026): DoD 8570 Approved List

Certified Information Systems Security Professional (CISSP)

ISC2

Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.

Certified Information Security Manager (CISM)

ISACA

Validates knowledge of information security governance, risk management, security program development and management, and incident management.

CompTIA SecurityX

CompTIA · Exam CAS-005

Validates knowledge of enterprise security architecture and engineering, including governance, risk, compliance and security operations.

Certified in Governance, Risk and Compliance (CGRC)

ISC2

Validates knowledge of authorizing and maintaining secure systems, including scoping, control selection, implementation, assessment and ongoing compliance.

Certified Chief Information Security Officer (CCISO)

EC-Council · Exam 712-50

Validates knowledge of security governance, executive leadership, program management, core security competencies, and strategic planning, finance and procurement.

GIAC Security Leadership (GSLC)

GIAC

Validates knowledge of managing security programs, including policy, risk, projects, vendors, SOC management and incident response.