Certifications Free guide
Security+
Recommended, not required: Network+ and two years in a security or systems administrator role.
Requirements
CompTIA recommends Network+ and two years in a security or systems administrator role. Exam SY0-701, up to 90 questions in 90 minutes. Version V8 is due around November 17, 2026.
- Who it is for
- Early-career security staff. CompTIA lists security analyst, security engineer and systems administrator, and maps the exam to DoD 8140 work roles.
- Roles asking for it here
- IT & Systems Administration (501), Security Engineering (379), Network Engineering (260)
- Provider
- CompTIA
- Open listings naming it
- 1,834
- Exam price
- Not listed on the official page. Check with CompTIA
- Official page
- CompTIA
Checked Nov 4, 2026
Certifications Free guide
CISSP
Five years of full-time work in two or more of the eight CISSP domains. A degree or approved credential can cover one year.
Requirements
Five years of cumulative full-time work in two or more of the eight CISSP domains. A related degree or an approved credential can count for one year. Part-time work and internships can count. Pass without the experience and you become an Associate of ISC2, with six years to earn it. ISC2 moves the exam to a new outline on April 15, 2027.
- Who it is for
- Experienced practitioners, managers and executives. ISC2 names roles such as CISO, security manager, security architect, security analyst and security auditor.
- Roles asking for it here
- Security Engineering (609), GRC, Compliance & Risk (237), Security Operations, Detection & Response (147)
- Provider
- ISC2
- Open listings naming it
- 1,692
- Exam price
- Not listed on the official page. Check with ISC2
- Official page
- ISC2
Checked Nov 4, 2026
Certifications Free guide
GIAC
Many separate certifications, each with its own proctored exam.
Requirements
GIAC offers many separate certifications, each a proctored exam. GIAC lists SANS courses as affiliated training and notes that work experience or self-study can also prepare you.
- Who it is for
- Specialists. Each GIAC certification targets one area, such as incident response, forensics, cloud security or penetration testing.
- Roles asking for it here
- Security Operations, Detection & Response (226), Security Engineering (213), IT & Systems Administration (45)
- Provider
- GIAC
- Open listings naming it
- 734
- Exam price
- Not listed on the official page. Check with GIAC
- Official page
- GIAC
Checked Nov 4, 2026
Certifications Free guide
CISM
Pass the exam, then apply with proof of qualifying work experience within five years. US$50 application fee.
Requirements
Pass the exam, then apply with proof of the required work experience within five years of passing. ISACA charges a US$50 application fee.
- Who it is for
- Security managers. The four domains are governance, risk management, the security program and incident management.
- Roles asking for it here
- Security Engineering (236), GRC, Compliance & Risk (157), Security Operations, Detection & Response (67)
- Provider
- ISACA
- Open listings naming it
- 636
- Exam price
- US$575 for ISACA members, US$760 for non-members (exam registration)
- Official page
- ISACA
Checked Nov 4, 2026
Certifications Free guide
CISA
Pass the exam, then apply with proof of qualifying work experience within five years. US$50 application fee.
Requirements
Pass the exam, then apply with proof of the required work experience within five years of passing. ISACA charges a US$50 application fee.
- Who it is for
- IT auditors and control assessors. The five domains run from the audit process to protection of information assets.
- Roles asking for it here
- GRC, Compliance & Risk (191), Security Engineering (138), Security Operations, Detection & Response (28)
- Provider
- ISACA
- Open listings naming it
- 460
- Exam price
- US$575 for ISACA members, US$760 for non-members (exam registration)
- Official page
- ISACA
Checked Nov 4, 2026
Certifications Free guide
CCSP
Five years of IT work, including three in cybersecurity and one in a CCSP domain. An active CISSP covers it.
Requirements
Five years of cumulative full-time IT work, including three in cybersecurity and one in one or more CCSP domains. A related degree or the CSA CCSK can count for one year. An active CISSP covers the whole requirement.
- Who it is for
- Security professionals working in cloud. The six exam domains cover cloud architecture, data, platform and application security, operations, and legal, risk and compliance.
- Roles asking for it here
- Security Engineering (124), Cloud & Infrastructure Security (47), GRC, Compliance & Risk (28)
- Provider
- ISC2
- Open listings naming it
- 319
- Exam price
- Not listed on the official page. Check with ISC2
- Official page
- ISC2
Checked Nov 4, 2026
Certifications Free guide
OSCP
No formal prerequisites. The exam is a 24-hour proctored practical.
Requirements
No formal prerequisites. OffSec recommends TCP/IP networking, Windows and Linux administration, and basic Bash or Python. The exam is a 24-hour proctored practical. Passing earns the OSCP, which does not expire, and the OSCP+, which lasts three years.
- Who it is for
- People moving into penetration testing. OffSec lists penetration tester, SOC analyst, vulnerability analyst and security engineer among the roles it suits.
- Roles asking for it here
- Security Engineering (96), Offensive Security & Pentesting (80), Application & Product Security (49)
- Provider
- OffSec
- Open listings naming it
- 293
- Exam price
- OSCP+ exam only $1,699; PEN-200 course plus exam bundle $1,749
- Official page
- OffSec
Checked Nov 4, 2026
Certifications Free guide
CRISC
Pass the exam, then apply with proof of qualifying work experience within five years. US$50 application fee.
Requirements
Pass the exam, then apply with proof of the required work experience within five years of passing. ISACA charges a US$50 application fee.
- Who it is for
- IT risk professionals. The four domains are IT governance, risk assessment, risk response and reporting, and technology and security.
- Roles asking for it here
- GRC, Compliance & Risk (104), Security Engineering (40), Security Leadership (14)
- Provider
- ISACA
- Open listings naming it
- 178
- Exam price
- US$575 for ISACA members, US$760 for non-members (exam registration)
- Official page
- ISACA
Checked Nov 4, 2026