IAM Level III Certifications (2026): DoD 8570 Approved List

Certified Information Systems Security Professional (CISSP)

ISC2

Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.

Certified Information Security Manager (CISM)

ISACA

Validates knowledge of information security governance, risk management, security program development and management, and incident management.

Certified Chief Information Security Officer (CCISO)

EC-Council · Exam 712-50

Validates knowledge of security governance, executive leadership, program management, core security competencies, and strategic planning, finance and procurement.

GIAC Security Leadership (GSLC)

GIAC

Validates knowledge of managing security programs, including policy, risk, projects, vendors, SOC management and incident response.