CyberSec First Responder (CFR)
CertNexus (Logical Operations)
Vendor-neutral, ANAB/ISO-IEC-17024-accredited certification validating the ability to identify, protect, detect, respond to, and recover from cybersecurity incidents.
We have a course for this
Built from this exam's published objectives. The first module is free.
Baseline certification levels
This certification satisfies these DoD baseline levels — the IAT / IAM / IASAE / CSSP requirement many contracts still state. It's a separate question from the 8140 work roles above, and there is no official mapping between the two.
What this qualifies you for
Listed specifically for 6 work roles — up to Advanced proficiency. Because options cascade downward, a cert listed at Advanced also satisfies Intermediate and Basic for that role.
Also listed for 14 Cyberspace Enablers roles — but so is every other certification
The Enablers matrix isn’t role-differentiated: the same certification options are listed for all 14 roles at every proficiency level. We verified that across all 14. So this is true, and it carries no information about this credential specifically — which is why it isn’t in the count above.
Renewal
Recertify by earning 90 Continuing Education Credits (CECs) over the 3-year cycle (minimum 30 CECs per year) or by retaking the current exam. Continuing-education recertification carries a US$150 fee.
This is the issuer’s clock. 8140 runs a second one — 20 hours of CPD a year, at every proficiency level, which applies even if you hold no certification at all. How that works
Domain weights (Identify 22, Protect 24, Detect 18, Respond 19, Recover 17 = 100) were extracted directly from the official CFR-410 blueprint PDF text and are verified. CFR-410 remains the current exam code as of July 2026; no successor code (e.g., CFR-510) was found. The blueprint notes exam objectives are subject to change without notice. Passing score is form-dependent (70% or 73%) because CertNexus statistically equates exam forms.
Source: CertNexus — CyberSec First Responder (CFR-410) Exam Blueprint v1.10 (official PDF, full text extracted) · dated 2026-07-17 · checked 2026-07-17
Verifying it
CertNexus (Logical Operations) publishes a lookup a third party can use without your involvement.
Public Credly badge URL; each badge is uniquely linked to issuer-verified data on Credly and validatable by anyone without the holder logging in.
Domain weights (Identify 22, Protect 24, Detect 18, Respond 19, Recover 17 = 100) were extracted directly from the official CFR-410 blueprint PDF text and are verified. CFR-410 remains the current exam code as of July 2026; no successor code (e.g., CFR-510) was found. The blueprint notes exam objectives are subject to change without notice. Passing score is form-dependent (70% or 73%) because CertNexus statistically equates exam forms.
Source: CertNexus — CyberSec First Responder (CFR-410) Exam Blueprint v1.10 (official PDF, full text extracted) · dated 2026-07-17 · checked 2026-07-17
Exam blueprint
Verified against CertNexus (Logical Operations)’s published outline.
CFR-410 · CFR-410 blueprint v1.10 (issued 2021-05-01, modified 2022-02-22)
Current80 questions · 120 minutes (includes 5 min candidate agreement + 5 min tutorial) · passing 70% or 73% depending on exam form
Domain weights (Identify 22, Protect 24, Detect 18, Respond 19, Recover 17 = 100) were extracted directly from the official CFR-410 blueprint PDF text and are verified. CFR-410 remains the current exam code as of July 2026; no successor code (e.g., CFR-510) was found. The blueprint notes exam objectives are subject to change without notice. Passing score is form-dependent (70% or 73%) because CertNexus statistically equates exam forms.
Source: CertNexus — CyberSec First Responder (CFR-410) Exam Blueprint v1.10 (official PDF, full text extracted) · dated 2026-07-17 · checked 2026-07-17