Skip to main content

Information Security - Certification Matrix

Certifications relevant to the governance / management side of information security. This file maps each certification to the subcategories of this category that prepare for it.

Core Certifications​

CertificationIssuerLevelSubcategories
CompTIA Security+CompTIAEntry01, 02, 03, 04, 05, 06
ISC2 CISSPISC2Advanced01, 02, 03, 04, 05, 06
ISACA CISMISACAAdvanced01, 02, 04, 05, 06

Extended Certifications​

CertificationIssuerLevelSubcategories
ISACA CRISCISACAAdvanced02
ISACA CISAISACAAdvanced03
ISO 27001 Lead Implementer (LI)PECB / BSIAdvanced01, 03, 04
ISO 27001 Lead Auditor (LA)PECB / BSIAdvanced01, 03, 04
CompTIA CySA+CompTIAIntermediate06
GIAC GCIHSANSAdvanced06

Domain Mapping (CISSP CBK)​

CISSP DomainSubcategories
1. Security and Risk Management01, 02, 03, 04
2. Asset Security03, 04
3. Security Architecture and Engineering04
4. Communication and Network Security(technical - see INFRASTRUCTURE)
5. Identity and Access Management(technical - see INFRASTRUCTURE)
6. Security Assessment and Testing06
7. Security Operations05, 06
8. Software Development Security(technical - see DEVSECOPS)

Domain Mapping (CISM)​

CISM DomainSubcategories
1. Information Security Governance01, 04
2. Information Security Risk Management02
3. Information Security Program03, 04, 05
4. Incident Management06

References​