IAT Level III Certifications (2026): DoD 8570 Approved List

Certified Information Systems Security Professional (CISSP)

ISC2

Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.

Certified Information Systems Auditor (CISA)

ISACA

Validates knowledge of IT auditing, covering audit processes, IT governance, systems development, operations, resilience and information asset protection.

Certified Cloud Security Professional (CCSP)

ISC2

Validates knowledge of securing cloud environments, including architecture, data, platforms, applications, operations and cloud legal and compliance requirements.

CompTIA SecurityX

CompTIA · Exam CAS-005

Validates knowledge of enterprise security architecture and engineering, including governance, risk, compliance and security operations.

GIAC Certified Incident Handler (GCIH)

GIAC

Validates practical skills in detecting, investigating and responding to security incidents, including attacker techniques, credential attacks and exploitation.

GIAC Certified Enterprise Defender (GCED)

GIAC

Validates knowledge of enterprise defense, including hardening, detection, network and identity analysis, incident response and malware triage.