IAT Level II Certifications (2026): DoD 8570 Approved List

CompTIA Security+

CompTIA · Exam SY0-701

Validates knowledge of security threats, protective controls, risk management and incident response across modern IT environments.

Cisco Certified Network Associate (CCNA)

Cisco · Exam 200-301

Validates knowledge of network fundamentals, routing, switching, IP services, security and automation for managing connected systems.

Certified Information Systems Security Professional (CISSP)

ISC2

Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.

Certified Information Systems Auditor (CISA)

ISACA

Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.

CompTIA CySA+

CompTIA · Exam CS0-004

Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.

Systems Security Certified Practitioner (SSCP)

ISC2

Validates practical skills in implementing access controls, monitoring risk, responding to incidents and securing networks, systems and applications.

Certified Cloud Security Professional (CCSP)

ISC2

Validates knowledge of securing cloud environments, including architecture, data, platforms, applications, operations and cloud legal and compliance requirements.

CompTIA SecurityX

CompTIA · Exam CAS-005

Validates knowledge of enterprise security architecture and engineering, including governance, risk, compliance and security operations.

GIAC Certified Incident Handler (GCIH)

GIAC

Validates practical skills in detecting, investigating and responding to security incidents, including attacker techniques, credential attacks and exploitation.

GIAC Security Essentials (GSEC)

GIAC

Validates knowledge of access control, networking, cryptography, Linux and Windows security, cloud security and incident handling.

Global Industrial Cyber Security Professional (GICSP)

GIAC

Validates hands-on knowledge of securing industrial control systems, including architecture, threats and attacks, communications, hardening, governance and recovery.

GIAC Certified Enterprise Defender (GCED)

GIAC

Validates knowledge of enterprise defense, including hardening, detection, network and identity analysis, incident response and malware triage.