What certification do I need?

Someone told you to get certified — a contract, an offer letter, or your security officer. Tell us what they said and we’ll tell you which certification satisfies it, how long it takes here, and where to start.

IAT — technical positions

The most common. A higher level satisfies the ones below it.

IAM — management positions

For positions responsible for security rather than hands-on administration.

CSSP — cybersecurity service provider roles

Five separate specialties. These do not cascade — each needs its own certification.

IASAE — architects and engineers

Design and build roles. These do not cascade either.

If it just names a certification — “must obtain Security+” — that’s IAT Level II in the table above; the Security+ course starts free.

Not sure which applies? Most govcon IT positions are written as IAT Level II, and Security+ is the certification that satisfies it.