Cybersecurity Certification Roadmap

Compare cybersecurity certifications by career role, experience level, cost, and community ratings. Explore your options or build a personalized path based on your goals.

Certified in Governance, Risk and Compliance (CGRC) | CyberDefenders

Last updated Nov 2026

Cybersecurity Certification Roadmap

Compare cybersecurity certifications by career role, experience level, cost, and community ratings. Explore your options or build a personalized path based on your goals.

New to certifications? Start here

Compare cybersecurity certifications

444 certifications

Certifications with fewer than 5 ratings show no score and are left off the chart.

All cybersecurity certifications, 444 certifications, sorted by rating descending

HTB Certified Defensive Security AnalystHack The Box	4.8	12	$490Exam + training	Associate
Certified CyberDefender Level 2CyberDefenders	4.6	14	$1,499Exam + training	Intermediate
Certified CyberDefender Level 1CyberDefenders	4.5	8	$599Exam + training	Associate
Practical SOC Analyst AssociateTCM Security	4.4	8	$249Exam + training	Associate
Blue Team Level 1Centri	3.8	36	$532Exam + training	Associate
Blue Team Level 2Centri	3.8	9	$2,664Exam + training	Intermediate
GIAC Certified Incident HandlerGIAC	3.4	5	$999Exam only	Intermediate
eJPT Junior Penetration TesterINE Security	3.3	6	$299Exam + training	Associate
CompTIA Cybersecurity AnalystCompTIA	3.2	5	$884Exam + training	Intermediate
CompTIA Security+CompTIA	3.0	10	$884Exam + training	Entry
Certified Ethical HackerEC-Council	2.4	5	Not listed	Intermediate
Adversary Operations & Proactive HuntingDark Vortex	—	0	$2,500Exam + training	Expert
Apple Certified Support ProfessionalApple	—	0	$149Exam only	Entry
Associate Cloud EngineerGoogle Cloud	—	0	$125Exam only	Associate
Associate Cyber Resilience Professional (ACRP)DRI International	—	0	$750Exam only	Entry
Associate Protection Professional (APP)ASIS International	—	0	$620Exam only	Entry
ATT&CK Cyber Threat Intelligence CertificationMAD20	—	0	$579Exam + training	Intermediate
ATT&CK Security Operations Center (SOC) Assessment CertificationMAD20	—	0	$579Exam + training	Intermediate
AWS Certified Cloud PractitionerAmazon Web Services	—	0	$100Exam only	Entry
AWS Certified Security - SpecialtyAmazon Web Services	—	0	$300Exam only	Expert
AWS Certified Solutions Architect - AssociateAmazon Web Services	—	0	$150Exam only	Associate
AWS Certified Solutions Architect - ProfessionalAmazon Web Services	—	0	$300Exam only	Intermediate
BCS Foundation Certificate in Information Security Management PrinciplesBCS, The Chartered Institute for IT	—	0	$267Exam only	Entry
BCS Practitioner Certificate in Information Assurance ArchitectureBCS, The Chartered Institute for IT	—	0	$307Exam only	Intermediate
BCS Practitioner Certificate in Information Risk ManagementBCS, The Chartered Institute for IT	—	0	$307Exam only	Intermediate
Burp Suite Certified PractitionerPortSwigger	—	0	$99Exam only	Intermediate
CCNA CybersecurityCisco	—	1	$300Exam only	Associate
CCNP AutomationCisco	—	0	$400Exam only	Intermediate
Certificate in Cybersecurity AnalysisIIBA	—	0	$550Exam + training	Entry
Certificate of Cloud Security KnowledgeCloud Security Alliance	—	0	$445Exam only	Entry
Certified Access Management Specialist (CAMS)Identity Management Institute	—	0	$195Exam only	Associate
Certified Advanced Software Security Tester (CASST)GAQM	—	0	$270Exam + training	Intermediate
Certified Advanced Windows Forensic Examiner (CAWFE)IACIS	—	0	$2,095Exam + training	Intermediate
Certified Agile Coach (CAC)GAQM	—	0	$210Exam + training	Associate
Certified Agile Developer (CAD)GAQM	—	0	$170Exam + training	Entry
Certified Agile Scrum Master (CASM)GAQM	—	0	$175Exam + training	Entry
Certified Application Security Engineer (CASE) JAVA / .NETEC-Council	—	0	Not listed	Intermediate
Certified AppSec PentesterThe SecOps Group	—	0	$333Exam only	Intermediate
Certified AppSec Pentesting eXpertThe SecOps Group	—	0	$533Exam only	Expert
Certified AppSec PractitionerThe SecOps Group	—	0	$133Exam only	Entry
Certified Associate in Project Management (CAPM)Project Management Institute (PMI)	—	0	$210Exam only	Entry
Certified Automation Cybersecurity Expertexida	—	0	$800Exam only	Expert
Certified Automation Cybersecurity Specialistexida	—	0	$700Exam only	Associate
Certified Blue TeamerMosse Cyber Security Institute (MCSI)	—	0	$699Exam + training	Intermediate
Certified Business Continuity AuditorDRI International	—	0	$2,950Exam + training	Intermediate
Certified Business Continuity Lead AuditorDRI International	—	0	$2,950Exam + training	Expert
Certified Chief Information Security OfficerEC-Council	—	0	Not listed	Expert
Certified Cloud Pentesting eXpert-AWSThe SecOps Group	—	0	$533Exam only	Expert
Certified Cloud Security EngineerEC-Council	—	0	$1,299Exam + training	Intermediate
Certified Cloud Security OfficerMile2	—	0	$995Exam + training	Not listed
Certified Cloud Security Practitioner-AWSThe SecOps Group	—	0	$133Exam only	Entry
Certified Cloud Security ProfessionalISC2	—	0	$599Exam only	Expert
Certified Computer ExaminerISFCE	—	0	$5,490Exam + training	Intermediate
Certified Computer Forensics ExaminerInfosec Institute	—	0	$4,599Exam + training	Associate
Certified Cyber Protection ExpertMosse Cyber Security Institute (MCSI)	—	0	$800Exam + training	Expert
Certified Cyber Resilience Professional (CCRP)DRI International	—	0	$750Exam only	Intermediate
Certified Cybersecurity AnalystMile2	—	1	$995Exam + training	Associate
Certified Cyber Security Analyst [C3SA]CyberWarFare Labs	—	2	$0Exam only	Entry
Certified Cyber Security Architect (CCSA)ecfirst	—	0	$1,495Exam + training	Intermediate
Certified Cybersecurity Operations AnalystISACA	—	0	$499Exam only	Associate
Certified Cybersecurity Systems AuditorMile2	—	0	$995Exam + training	Associate
Certified Data Privacy Solutions EngineerISACA	—	0	$575Exam only	Intermediate
Certified Detection Engineering AssociateCentri	—	1	$532Exam + training	Associate
Certified DevSecOps ExpertPractical DevSecOps	—	0	$1,019Exam + training	Expert
Certified DevSecOps Professional (CDP)Practical DevSecOps	—	0	$764Exam + training	Associate
Certified DFIR SpecialistMosse Cyber Security Institute (MCSI)	—	0	$699Exam + training	Intermediate
Certified Digital Forensics ExaminerMile2	—	1	$995Exam + training	Intermediate
Certified Digital Forensics ProfessionalINE Security	—	2	$399Exam + training	Intermediate
Certified Disaster Recovery EngineerMile2	—	0	$995Exam + training	Associate
Certified Forensic AnalystGAQM	—	0	$185Exam + training	Associate
Certified Forensic Computer Examiner (CFCE)IACIS	—	0	$800Exam only	Intermediate
Certified Forensic Security ResponderOpenText	—	0	$500Exam only	Intermediate
Certified GRC ExpertMosse Cyber Security Institute (MCSI)	—	0	$595Exam + training	Intermediate
Certified Hacker AnalystISECOM	—	0	$110Exam only	Entry
Certified Hacker Analyst TrainerISECOM	—	0	$334Exam only	Associate
Certified Healthcare Information Systems Security PractitionerMile2	—	0	$995Exam + training	Associate
Certified Identity and Access Manager (CIAM)Identity Management Institute	—	0	$390Exam + training	Not listed
Certified Identity and Security Technologist (CIST)Identity Management Institute	—	0	$295Exam only	Intermediate
Certified Identity Governance ExpertIdentity Management Institute	—	0	$395Exam only	Expert
Certified Identity Management ProfessionalIdentity Management Institute	—	0	$295Exam only	Intermediate
Certified Identity ProfessionalIDPro	—	0	$750Exam only	Associate
Certified Identity Protection Advisor (CIPA)Identity Management Institute	—	0	$295Exam only	Entry
Certified Incident Handling EngineerMile2	—	0	$995Exam + training	Intermediate
Certified Incident ResponderINE Security	—	3	$599Exam + training	Intermediate
Certified in CybersecurityISC2	—	3	$454Exam + training	Entry
Certified in Data Protection (CDP)Identity Management Institute	—	0	$395Exam only	Associate
Certified Information Privacy ProfessionalIAPP	—	0	$1,745Exam + training	Associate
Certified Information Privacy TechnologistIAPP	—	0	$1,745Exam + training	Associate
Certified Information Security ManagerISACA	—	2	$760Exam only	Expert
Certified Information Security ProfessionalGAQM	—	0	$200Exam + training	Intermediate
Certified Information Systems AuditorISACA	—	1	$760Exam only	Intermediate
Certified Information Systems Risk ManagerMile2	—	0	$995Exam + training	Intermediate
Certified Information Systems Security ManagerGAQM	—	0	$200Exam + training	Expert
Certified Information Systems Security OfficerMile2	—	0	$995Exam + training	Intermediate
Certified Information Systems Security ProfessionalISC2	—	3	$1,344Exam + training	Expert
Certified Information Systems Security TesterGAQM	—	0	$230Exam + training	Associate
Certified in Governance, Risk and ComplianceISC2	—	0	$599Exam only	Intermediate
Certified in Risk and Information Systems ControlISACA	—	0	$760Exam only	Expert
Certified Internal AuditorThe Institute of Internal Auditors	—	0	$1,275Exam only	Intermediate
Certified Internet of Things Security PractitionerCertNexus	—	0	$404Exam + training	Associate
Certified in the Governance of Enterprise ITISACA	—	0	$760Exam only	Expert
Certified ISMS Lead Auditor/ImplementerMile2	—	0	$995Exam + training	Intermediate
Certified ISO 27001:2022 ISMS Foundation (CIS F)IBITGQ	—	0	$855Exam + training	Entry
Certified ISO 27001:2022 ISMS Lead ImplementerIBITGQ	—	0	$2,926Exam + training	Intermediate
Certified Kubernetes Administrator (CKA)Cloud Native Computing Foundation	—	0	$445Exam only	Intermediate
Certified Kubernetes Application DeveloperCloud Native Computing Foundation	—	0	$645Exam + training	Intermediate
Certified Kubernetes Security SpecialistCloud Native Computing Foundation	—	0	$625Exam + training	Intermediate
Certified Master Cyber Forensics InvestigatorMile2	—	1	$3,180Exam + training	Expert
Certified Master Cyber Threat AnalystMile2	—	1	$3,180Exam + training	Expert
Certified Master Information Systems Security OfficerMile2	—	0	$3,180Exam + training	Expert
Certified Master Intrusion Prevention SpecialistMile2	—	1	$3,180Exam + training	Intermediate
Certified Mobile and Web App Penetration TesterInfosec Institute	—	0	$4,599Exam + training	Associate
Certified Mobile Forensics ExaminerInfosec Institute	—	0	$1,699Exam + training	Associate
Certified Mobile Pentester - AndroidThe SecOps Group	—	0	$333Exam only	Intermediate
Certified Mobile Pentester - iOSThe SecOps Group	—	0	$333Exam only	Intermediate
Certified Mobile Security Engineer8kSec	—	1	$1,499Exam + training	Intermediate
Certified Network DefenderEC-Council	—	1	$550Exam only	Associate
Certified Network Forensics ExaminerMile2	—	1	$995Exam + training	Not listed
Certified Network PentesterThe SecOps Group	—	0	$333Exam only	Intermediate
Certified Network Security PractitionerThe SecOps Group	—	0	$133Exam only	Entry
Certified Operational Technology Cybersecurity Professional (TÜV)TÜV Rheinland	—	0	$390Exam only	Expert
Certified OT Security Manager TÜV® (COSM)Limes Security / TÜV AUSTRIA	—	0	$3,871Exam + training	Intermediate
Certified OT Security Practitioner TÜV® (COSP)Limes Security / TÜV AUSTRIA	—	0	$3,525Exam + training	Entry
Certified OT Security Technical Expert TÜV (COSTE)Limes Security / TÜV AUSTRIA	—	0	$3,871Exam + training	Associate
Certified Penetration TesterMosse Cyber Security Institute (MCSI)	—	0	$595Exam + training	Intermediate
Certified Penetration Tester (CPT)GAQM	—	0	$170Exam + training	Associate
Certified Penetration Testing ConsultantMile2	—	0	$995Exam + training	Intermediate
Certified Penetration Testing EngineerMile2	—	0	$995Exam + training	Intermediate
Certified Penetration Testing ProfessionalEC-Council	—	1	Not listed	Intermediate
Certified Powershell HackerMile2	—	0	$995Exam + training	Intermediate
Certified Professional Ethical HackerMile2	—	0	$995Exam + training	Associate
Certified Professional Ethical Hacker (CPEH)GAQM	—	0	$210Exam + training	Associate
Certified Professional Penetration TesterINE Security	—	2	$599Exam + training	Intermediate
Certified Project Director (CPD)GAQM	—	0	$280Exam + training	Intermediate
Certified Protection ProfessionalASIS International	—	0	$910Exam only	Expert
Certified Red Team AnalystCyberWarFare Labs	—	1	$69Exam + training	Associate
Certified Red TeamerMosse Cyber Security Institute (MCSI)	—	0	$699Exam + training	Intermediate
Certified Red Team ExpertAltered Security	—	1	$299Exam + training	Expert
Certified Red Team MasterAltered Security	—	1	$399Exam + training	Expert
Certified Red Team Operations ProfessionalInfosec Institute	—	0	$4,599Exam + training	Associate
Certified Red Team OperatorZero-Point Security	—	1	$532Exam + training	Associate
Certified Red Team ProfessionalAltered Security	—	1	$249Exam + training	Associate
Certified Reverse EngineerMosse Cyber Security Institute (MCSI)	—	0	$699Exam + training	Intermediate
Certified Risk Management Professional (CRMP)DRI International	—	0	$750Exam only	Intermediate
Certified SAFe Practitioner (CSP)GAQM	—	0	$190Exam + training	Entry
Certified Secure Computer UserEC-Council	—	0	$149Exam + training	Entry
Certified Secure Software Lifecycle ProfessionalISC2	—	0	$599Exam only	Intermediate
Certified Secure Web Application EngineerMile2	—	0	$995Exam + training	Intermediate
Certified Security Awareness PractitionerInfosec Institute	—	0	$3,499Exam + training	Entry
Certified Security Compliance Specialist (CSCS)ecfirst	—	0	$1,495Exam + training	Associate
Certified Security Leadership OfficerMile2	—	0	$995Exam + training	Intermediate
Certified Security Management Professional (CSMP)International Security Management Institute (ISMI)	—	0	$1,993Exam + training	Intermediate
Certified Security Manager (CSM)International Security Management Institute (ISMI)	—	0	$1,046Exam + training	Intermediate
Certified Security Operations ManagerCentri	—	1	$2,664Exam + training	Expert
Certified Security PrinciplesMile2	—	0	$995Exam + training	Entry
Certified SOC AnalystEC-Council	—	1	$550Exam + training	Associate
Certified Software Security Tester (CSST)GAQM	—	0	$220Exam + training	Associate
Certified Third-Party Risk AssessorShared Assessments	—	0	$995Exam + training	Intermediate
Certified Third-Party Risk ProfessionalShared Assessments	—	0	$695Exam + training	Expert
Certified Threat AnalystSECO Institute (DNV)	—	0	Not listed	Intermediate
Certified Threat Hunting ProfessionalINE Security	—	2	$599Exam + training	Intermediate
Certified Threat Intelligence AnalystMile2	—	0	$995Exam + training	Intermediate
Certified Threat Intelligence AnalystEC-Council	—	0	$550Exam + training	Intermediate
Certified Vulnerability AssessorMile2	—	0	$995Exam + training	Associate
Certified Vulnerability Researcher and Exploitation SpecialistMosse Cyber Security Institute (MCSI)	—	0	$699Exam + training	Expert
Certified Wireless Security ProfessionalCWNP	—	0	$1,225Exam + training	Intermediate
Check Point Certified Security AdministratorCheck Point	—	0	$3,800Exam + training	Associate
Check Point Certified Security ExpertCheck Point	—	0	$3,800Exam + training	Intermediate
Check Point Certified Security MasterCheck Point	—	0	$200Exam only	Expert
Cisco Certified Cybersecurity ProfessionalCisco	—	2	$400Exam only	Intermediate
Cisco Certified Design ExpertCisco	—	0	$2,050Exam only	Expert
Cisco Certified Field TechnicianCisco	—	0	$200Exam only	Entry
Cisco Certified Internetwork Expert - Enterprise InfrastructureCisco	—	0	$1,600Exam only	Expert
Cisco Certified Internetwork Expert - SecurityCisco	—	0	$2,000Exam only	Expert
Cisco Certified Network AssociateCisco	—	0	$300Exam only	Associate
Cisco Certified Network Associate AutomationCisco	—	0	$300Exam only	Associate
Cisco Certified Network Professional - EnterpriseCisco	—	0	$400Exam only	Intermediate
Cisco Certified Network Professional - SecurityCisco	—	0	$400Exam only	Intermediate
Cloud EssentialsCompTIA	—	0	$99Exam only	Entry
CMMC Certified Professional (CCP)ecfirst	—	0	$3,695Exam + training	Intermediate
CompTIA A+CompTIA	—	0	$561Exam + training	Entry
CompTIA Cloud+CompTIA	—	0	$764Exam + training	Intermediate
CompTIA Linux+CompTIA	—	0	$764Exam + training	Associate
CompTIA Network+CompTIA	—	0	$916Exam + training	Associate
CompTIA PenTest+CompTIA	—	0	$884Exam + training	Intermediate
CompTIA Project+CompTIA	—	0	$764Exam + training	Entry
CompTIA SecurityXCompTIA	—	3	$1,388Exam + training	Expert
CompTIA Server+CompTIA	—	0	$764Exam + training	Associate
Computer Hacking Forensic InvestigatorEC-Council	—	0	Not listed	Intermediate
CREST Certified Red Team SpecialistCREST	—	0	$2,133Exam only	Expert
CREST Certified Simulated Attack ManagerCREST	—	0	$2,133Exam only	Expert
CREST Certified Tester - InfrastructureCREST	—	0	$2,133Exam only	Expert
CREST Certified Threat Intelligence ManagerCREST	—	0	Not listed	Expert
CREST Certified Web Application TesterCREST	—	0	$2,133Exam only	Expert
CREST Practitioner Intrusion AnalystCREST	—	0	$367Exam only	Associate
CREST Practitioner Security AnalystCREST	—	0	$367Exam only	Associate
CREST Practitioner Threat Intelligence AnalystCREST	—	0	$367Exam only	Entry
CREST Registered Intrusion AnalystCREST	—	0	$800Exam only	Intermediate
CREST Registered Penetration TesterCREST	—	1	$800Exam only	Intermediate
CREST Registered Threat Intelligence AnalystCREST	—	0	$800Exam only	Associate
Cyber Defence AnalystCyberWarFare Labs	—	2	$69Exam + training	Associate
Cyber Incident Response Management Foundation (CIRM F)IBITGQ	—	0	$660Exam + training	Entry
Cyber Scheme Team Leader (CSTL)The Cyber Scheme	—	0	$2,133Exam only	Expert
Cyber Scheme Team MemberThe Cyber Scheme	—	0	$800Exam only	Associate
CyberSec First ResponderCertNexus	—	1	$368Exam only	Intermediate
Cyber Secure Coder (CSC)CertNexus	—	0	$368Exam only	Associate
Cybersecurity-Awareness-Beauftragter (TÜV)TÜV Rheinland	—	0	$2,499Exam + training	Intermediate
Cybersecurity FoundationPECB	—	0	Not listed	Entry
Cybersecurity Fundamentals CertificateISACA	—	0	$364Exam + training	Entry
Cybersecurity Specialist (TÜV Rheinland)TÜV Rheinland	—	0	Not listed	Intermediate
Cyber Struggle AegisCyber Struggle	—	0	Not listed	Associate
Cyber Struggle RangerCyber Struggle	—	0	Not listed	Intermediate
Docker Certified AssociateMirantis	—	0	$199Exam only	Associate
DSCI Certified Privacy ProfessionalData Security Council of India (DSCI)	—	0	$158Exam only	Entry
EC-Council Certified Encryption SpecialistEC-Council	—	0	$349Exam + training	Associate
EC-Council Certified Incident HandlerEC-Council	—	0	Not listed	Intermediate
EC-Council Certified Security SpecialistEC-Council	—	0	$495Exam + training	Entry
EC-Council Disaster Recovery ProfessionalEC-Council	—	0	$1,100Exam + training	Intermediate
EITCA/IS Information Security Academy CertificateEuropean IT Certification Institute (EITCI)	—	0	$1,060Exam + training	Entry
EnCase Certified Examiner (EnCE)OpenText	—	0	$500Exam only	Intermediate
Ethical Hacking Foundation (S-EHF)SECO Institute (DNV)	—	0	Not listed	Entry
Ethical Hacking Practitioner (S-EHP)SECO Institute (DNV)	—	0	Not listed	Associate
EXIN Cyber and IT Security FoundationEXIN	—	0	Not listed	Entry
EXIN Information Security Foundation based on ISO/IEC 27001EXIN	—	0	Not listed	Entry
EXIN Information Security Management Professional based on ISO/IEC 27001EXIN	—	0	Not listed	Intermediate
EXIN Privacy & Data Protection Essentials based on LGPDEXIN	—	0	Not listed	Entry
EXIN Privacy & Data Protection FoundationEXIN	—	0	Not listed	Entry
EXIN Privacy & Data Protection ProfessionalEXIN	—	0	Not listed	Intermediate
Exterro ACEExterro	—	0	$100Exam only	Associate
F5 Certified Administrator, BIG-IPF5	—	0	$250Exam only	Associate
F5 Certified Solution Expert, SecurityF5	—	0	$180Exam only	Expert
F5 Certified Technology Specialist, BIG-IP APMF5	—	0	$180Exam only	Intermediate
F5 Certified Technology Specialist, BIG-IP DNSF5	—	0	$780Exam + training	Intermediate
GIAC Advanced Smartphone ForensicsGIAC	—	0	$999Exam only	Intermediate
GIAC Assessing and Auditing Wireless NetworksGIAC	—	0	$999Exam only	Intermediate
GIAC Battlefield Forensics and AcquisitionGIAC	—	0	$999Exam only	Intermediate
GIAC Certified Detection AnalystGIAC	—	0	$999Exam only	Intermediate
GIAC Certified Enterprise DefenderGIAC	—	1	$999Exam only	Intermediate
GIAC Certified Forensic AnalystGIAC	—	3	$999Exam only	Intermediate
GIAC Certified Forensic ExaminerGIAC	—	1	$999Exam only	Intermediate
GIAC Certified Intrusion Analyst Certification (GCIA)GIAC	—	2	$999Exam only	Intermediate
GIAC Certified Web Application DefenderGIAC	—	0	$9,259Exam + training	Intermediate
GIAC Cloud Forensics ResponderGIAC	—	0	$999Exam only	Intermediate
GIAC Cloud Penetration TesterGIAC	—	0	$999Exam only	Intermediate
GIAC Cloud Security AutomationGIAC	—	0	$999Exam only	Intermediate
GIAC Cloud Security EssentialsGIAC	—	0	$999Exam only	Intermediate
GIAC Cloud Threat DetectionGIAC	—	0	$999Exam only	Intermediate
GIAC Continuous Monitoring CertificationGIAC	—	0	$999Exam only	Intermediate
GIAC Critical Controls Certification (GCCC)GIAC	—	0	$999Exam only	Intermediate
GIAC Critical Infrastructure ProtectionGIAC	—	0	$999Exam only	Intermediate
GIAC Cyber Threat IntelligenceGIAC	—	0	$999Exam only	Intermediate
GIAC Defending Advanced ThreatsGIAC	—	0	$999Exam only	Intermediate
GIAC Defensible Security ArchitectGIAC	—	0	$999Exam only	Intermediate
GIAC Enterprise Incident ResponseGIAC	—	1	$999Exam only	Intermediate
GIAC Experienced Forensics Analyst (GX-FA)GIAC	—	1	$1,299Exam only	Expert
GIAC Experienced Forensics Examiner (GX-FE)GIAC	—	1	$1,299Exam only	Expert
GIAC Experienced Intrusion Analyst (GX-IA)GIAC	—	1	$1,299Exam only	Expert
GIAC Experienced Penetration TesterGIAC	—	0	$1,299Exam only	Expert
GIAC Exploit Researcher and Advanced Penetration TesterGIAC	—	0	$999Exam only	Expert
GIAC Foundational Cybersecurity TechnologiesGIAC	—	0	$399Exam only	Entry
GIAC Global Industrial Cyber Security ProfessionalGIAC	—	0	$999Exam only	Intermediate
GIAC Information Security FundamentalsGIAC	—	0	$499Exam only	Entry
GIAC Information Security ProfessionalGIAC	—	0	$999Exam only	Intermediate
GIAC iOS and macOS ExaminerGIAC	—	0	$999Exam only	Intermediate
GIAC Machine Learning Engineer (GMLE)GIAC	—	0	$9,779Exam + training	Intermediate
GIAC Mobile Device Security Analyst (GMOB)GIAC	—	0	$999Exam only	Intermediate
GIAC Network Forensic Analyst (GNFA)GIAC	—	1	$999Exam only	Intermediate
GIAC Open Source IntelligenceGIAC	—	0	$999Exam only	Associate
GIAC Penetration Tester (GPEN)GIAC	—	0	$999Exam only	Intermediate
GIAC Public Cloud SecurityGIAC	—	0	$999Exam only	Intermediate
GIAC Python CoderGIAC	—	0	Not listed	Associate
GIAC Red Team ProfessionalGIAC	—	0	$999Exam only	Intermediate
GIAC Response and Industrial DefenseGIAC	—	0	$999Exam only	Intermediate
GIAC Reverse Engineering Malware (GREM)GIAC	—	2	$999Exam only	Expert
GIAC Security Essentials CertificationGIAC	—	0	$9,779Exam + training	Associate
GIAC Security ExpertGIAC	—	0	Not listed	Expert
GIAC Security Leadership (GSLC)GIAC	—	0	$999Exam only	Intermediate
GIAC Security Operations CertifiedGIAC	—	0	$999Exam only	Associate
GIAC Security ProfessionalGIAC	—	0	Not listed	Expert
GIAC Strategic Planning, Policy, and Leadership (GSTRT)GIAC	—	0	$999Exam only	Expert
GIAC Web Application Penetration TesterGIAC	—	0	$9,779Exam + training	Intermediate
Google Cybersecurity Professional CertificateGoogle	—	3	$294Exam + training	Entry
GRC Auditor (GRCA)OCEG	—	0	$499Exam + training	Associate
GRC Professional (GRCP)OCEG	—	0	$499Exam + training	Entry
HTB Certified Penetration Testing SpecialistHack The Box	—	2	$580Exam + training	Associate
HTB Certified Web Exploitation ExpertHack The Box	—	0	$350Exam only	Expert
HTB Certified Web Exploitation SpecialistHack The Box	—	3	$210Exam only	Associate
Information Security Foundation (S-ISF)SECO Institute (DNV)	—	0	Not listed	Entry
Information Security OfficerSECO Institute (DNV)	—	0	Not listed	Expert
Information Security PractitionerSECO Institute (DNV)	—	0	Not listed	Associate
IntelTechniques Open Source Intelligence ProfessionalIntelTechniques	—	0	$999Exam + training	Intermediate
Investigating Windows Endpoints13Cubed	—	0	$795Exam + training	Associate
ISA/IEC 62443 Cybersecurity Design SpecialistInternational Society of Automation (ISA)	—	0	$2,268Exam + training	Intermediate
ISA/IEC 62443 Cybersecurity ExpertInternational Society of Automation (ISA)	—	0	$11,786Exam + training	Expert
ISA/IEC 62443 Cybersecurity Fundamentals SpecialistInternational Society of Automation (ISA)	—	0	$2,268Exam + training	Entry
ISA/IEC 62443 Cybersecurity Risk Assessment SpecialistInternational Society of Automation (ISA)	—	0	$2,268Exam + training	Intermediate
ISC2 Certified Information Systems Security Professional ConcentrationsISC2	—	0	$599Exam only	Expert
ISO 27005 Certified ISMS Risk ManagementIBITGQ	—	0	$1,993Exam + training	Intermediate
ISO/IEC 20000 AuditorAPMG International	—	0	Not listed	Intermediate
ISO/IEC 20000 FoundationAPMG International	—	0	$412Exam only	Entry
ISO/IEC 20000 PractitionerAPMG International	—	0	$412Exam only	Associate
ISO/IEC 27001:2022 Certified ISMS Internal AuditorIBITGQ	—	0	$1,510Exam + training	Associate
ISO/IEC 27001:2022 Certified ISMS Lead AuditorIBITGQ	—	0	$2,926Exam + training	Intermediate
ISO/IEC 27001 AuditorAPMG International	—	0	$621Exam only	Associate
ISO/IEC 27001 FoundationAPMG International	—	0	$412Exam only	Entry
ISO/IEC 27001 Practitioner - Information Security OfficerAPMG International	—	0	$621Exam only	Associate
ISO/IEC 27005 FoundationPECB	—	0	Not listed	Entry
ISO/IEC 27005 Risk ManagerPECB	—	0	Not listed	Intermediate
ITIL Foundation (Version 5)PeopleCert	—	0	$1,153Exam + training	Entry
ITIL Managing Professional Transition (Version 5)PeopleCert	—	0	$1,720Exam + training	Intermediate
ITIL Master (Version 5)PeopleCert	—	0	Not listed	Expert
ITIL Strategic LeaderPeopleCert	—	0	$3,789Exam + training	Intermediate
IT Security Manager (TÜV)TÜV Rheinland	—	0	Not listed	Intermediate
IT Specialist - CybersecurityCertiport	—	0	$163Exam + training	Entry
IT Specialist - Network SecurityCertiport	—	0	$133Exam only	Entry
Junior Penetration Tester (PT1)TryHackMe	—	1	$209Exam only	Associate
Juniper Networks Certified Internet Expert, SecurityHPE Juniper Networking	—	0	$2,200Exam + training	Expert
Juniper Networks Certified Internet Professional, SecurityHPE Juniper Networking	—	0	Not listed	Intermediate
Kali Linux Certified ProfessionalOffSec	—	0	$799Exam + training	Entry
Kubernetes and Cloud Native AssociateCloud Native Computing Foundation	—	0	$299Exam + training	Entry
Licensed Penetration Tester (LPT) MasterEC-Council	—	1	$1,898Exam + training	Expert
Linux Foundation Certified IT Associate (LFCA)The Linux Foundation	—	0	$299Exam + training	Entry
Linux Foundation Certified System AdministratorThe Linux Foundation	—	0	$625Exam + training	Associate
Linux Professional Institute Certified: 303 SecurityLinux Professional Institute	—	0	$200Exam only	Expert
Linux Professional Institute Certified: Linux AdministratorLinux Professional Institute	—	0	$400Exam only	Associate
Linux Professional Institute Certified: Linux EngineerLinux Professional Institute	—	0	$200Exam only	Intermediate
Malware Incident & Log ForensicsDark Vortex	—	0	$2,000Exam + training	Intermediate
Malware On SteroidsDark Vortex	—	0	$2,500Exam + training	Expert
MCSE - Certified Cloud Security EngineerMosse Cyber Security Institute (MCSI)	—	0	$595Exam + training	Intermediate
MCSF - Cloud Services FundamentalsMosse Cyber Security Institute (MCSI)	—	0	$450Exam + training	Entry
MCSI Cloud Penetration Tester (MCPT)Mosse Cyber Security Institute (MCSI)	—	0	$699Exam + training	Intermediate
MDSO - Certified DevSecOps EngineerMosse Cyber Security Institute (MCSI)	—	0	$699Exam + training	Intermediate
Microsoft Certified: Azure Administrator AssociateMicrosoft	—	0	$165Exam only	Associate
Microsoft Certified: Azure FundamentalsMicrosoft	—	0	$99Exam only	Entry
Microsoft Certified: Azure Solutions Architect ExpertMicrosoft	—	0	$165Exam only	Expert
Microsoft Certified: Cybersecurity Architect ExpertMicrosoft	—	0	$165Exam only	Expert
Microsoft Certified: Identity and Access Administrator AssociateMicrosoft	—	0	$165Exam only	Associate
Microsoft Certified: Security, Compliance, and Identity FundamentalsMicrosoft	—	0	$99Exam only	Entry
Microsoft Certified: Security Operations Analyst AssociateMicrosoft	—	1	$165Exam only	Associate
MICS - Introduction to Cyber SecurityMosse Cyber Security Institute (MCSI)	—	0	$0Exam only	Entry
Mobile Application Penetration TesterINE Security	—	0	$599Exam + training	Intermediate
MOIS Certified OSINT Expert CertificationMosse Cyber Security Institute (MCSI)	—	0	$699Exam + training	Entry
M_o_R 4 PractitionerPeopleCert	—	0	$1,318Exam + training	Intermediate
M_o_R Foundation (3rd edition)PeopleCert	—	0	$517Exam only	Entry
MSAF - System Administration FundamentalsMosse Cyber Security Institute (MCSI)	—	0	$450Exam + training	Entry
MTH - Certified Threat HunterMosse Cyber Security Institute (MCSI)	—	0	$595Exam + training	Intermediate
MTIA - Certified Threat Intelligence AnalystMosse Cyber Security Institute (MCSI)	—	0	$595Exam + training	Intermediate
NSE 4 FortiOSFortinet	—	0	$200Exam only	Associate
NSE 5 in Cloud SecurityFortinet	—	0	$200Exam only	Associate
NSE 5 in SASEFortinet	—	0	$200Exam only	Associate
NSE 5 in Secure NetworkingFortinet	—	0	$200Exam only	Associate
NSE 5 in Security OperationsFortinet	—	0	$200Exam only	Intermediate
NSE 6 in Cloud SecurityFortinet	—	0	$200Exam only	Intermediate
NSE 6 in SASEFortinet	—	0	$200Exam only	Intermediate
NSE 6 in Secure NetworkingFortinet	—	0	$200Exam only	Intermediate
NSE 6 in Security OperationsFortinet	—	0	$200Exam only	Intermediate
NSE 7 in Cloud SecurityFortinet	—	0	$200Exam only	Intermediate
NSE 7 in SASEFortinet	—	0	$200Exam only	Intermediate
NSE 7 in Secure NetworkingFortinet	—	0	$200Exam only	Intermediate
NSE 7 in Security OperationsFortinet	—	0	$200Exam only	Intermediate
NSE 8 Cybersecurity ExpertFortinet	—	0	$840Exam only	Expert
NSE Industry - OT SecurityFortinet	—	0	$200Exam only	Expert
Offensive Tool DevelopmentDark Vortex	—	0	$2,000Exam + training	Intermediate
OffSec Certified Expert 3OffSec	—	0	$1,749Exam + training	Expert
OffSec Certified ProfessionalOffSec	—	3	$1,749Exam + training	Intermediate
OffSec Defense AnalystOffSec	—	2	$1,749Exam + training	Associate
OffSec Experienced Penetration TesterOffSec	—	0	$1,749Exam + training	Expert
OffSec Exploitation ExpertOffSec	—	0	Not listed	Expert
OffSec Exploit DeveloperOffSec	—	0	$1,749Exam + training	Expert
OffSec Incident ResponderOffSec	—	2	$1,749Exam + training	Associate
OffSec Threat HunterOffSec	—	1	$1,749Exam + training	Associate
OffSec Web AssessorOffSec	—	0	$1,749Exam + training	Associate
OffSec Web ExpertOffSec	—	2	$1,749Exam + training	Expert
OffSec Wireless ProfessionalOffSec	—	0	Not listed	Associate
OSSTMM Professional Security AnalystISECOM	—	0	$557Exam only	Intermediate
OSSTMM Professional Security ExpertISECOM	—	0	$557Exam only	Entry
OSSTMM Professional Security TesterISECOM	—	1	$557Exam only	Intermediate
OSSTMM Wireless Security ExpertISECOM	—	0	$557Exam only	Intermediate
Palo Alto Networks Certified Cloud Security EngineerPalo Alto Networks	—	0	$250Exam only	Intermediate
Palo Alto Networks Certified Cybersecurity ApprenticePalo Alto Networks	—	0	$150Exam only	Entry
Palo Alto Networks Certified Network Security AnalystPalo Alto Networks	—	0	$250Exam only	Associate
Palo Alto Networks Certified Next-Generation Firewall EngineerPalo Alto Networks	—	0	$250Exam only	Intermediate
Palo Alto Networks Certified XDR AnalystPalo Alto Networks	—	0	$250Exam only	Intermediate
PECB Certificate Holder in ISO/IEC 27001:2022 FoundationPECB	—	0	Not listed	Entry
PECB Certified ISO/IEC 27001 Lead AuditorPECB	—	0	Not listed	Intermediate
PECB Certified ISO/IEC 27001 Lead ImplementerPECB	—	0	Not listed	Intermediate
PECB Certified ISO/IEC 27005 Lead Risk ManagerPECB	—	0	Not listed	Intermediate
PECB Certified Lead Cybersecurity ManagerPECB	—	0	Not listed	Intermediate
PECB Lead Cloud Security ManagerPECB	—	0	Not listed	Intermediate
PMI Agile Certified Practitioner (PMI-ACP)Project Management Institute (PMI)	—	0	$747Exam + training	Intermediate
Practical Junior Penetration TesterTCM Security	—	2	$249Exam + training	Associate
Practical Malware Research ProfessionalTCM Security	—	0	$499Exam + training	Associate
Practical Network Penetration TesterTCM Security	—	3	$499Exam + training	Intermediate
Practical Windows Forensic AnalystBlue Cape Security	—	1	$697Exam + training	Associate
Professional Agile Leadership (PAL I)Scrum.org	—	0	$200Exam only	Associate
Professional Certified InvestigatorASIS International	—	0	$910Exam only	Intermediate
Professional Cloud ArchitectGoogle Cloud	—	0	$200Exam only	Intermediate
Professional Cloud Security EngineerGoogle Cloud	—	0	$200Exam only	Intermediate
Professional in Project Management (PPM)GAQM	—	0	$340Exam + training	Associate
Professional Scrum DeveloperScrum.org	—	0	$200Exam only	Associate
Professional Scrum Master IScrum.org	—	0	$279Exam + training	Entry
Professional Scrum Master IIScrum.org	—	0	$299Exam + training	Intermediate
Professional Scrum Master IIIScrum.org	—	0	$500Exam only	Expert
Program Management Professional (PgMP)Project Management Institute (PMI)	—	0	$700Exam only	Expert
Project Management ProfessionalProject Management Institute (PMI)	—	0	$575Exam only	Intermediate
Qualified Security Assessor (QSA)PCI Security Standards Council	—	0	$3,600Exam + training	Intermediate
Red Hat Certified ArchitectRed Hat	—	0	$500Exam only	Expert
Red Hat Certified Engineer in Enterprise LinuxRed Hat	—	0	$500Exam only	Intermediate
Red Hat Certified System AdministratorRed Hat	—	0	$500Exam only	Associate
Red Team LeadZero-Point Security	—	2	$598Exam + training	Expert
Red Team & Operational SecurityDark Vortex	—	0	$2,500Exam + training	Intermediate
Remote Cybersecurity InternshipMosse Cyber Security Institute (MCSI)	—	0	$199Exam + training	Entry
SABSA Chartered Security Architect - Foundation CertificateThe SABSA Institute	—	0	Not listed	Associate
SABSA Chartered Security Architect - Master CertificateThe SABSA Institute	—	0	Not listed	Expert
SABSA Chartered Security Architect - Practitioner CertificateThe SABSA Institute	—	0	Not listed	Intermediate
Salesforce Certified Experience Cloud ConsultantSalesforce	—	0	$200Exam only	Intermediate
Salesforce Certified Platform Identity and Access Management ArchitectSalesforce	—	0	$400Exam only	Intermediate
Salesforce Certified System ArchitectSalesforce	—	0	Not listed	Expert
Salesforce Certified Technical ArchitectSalesforce	—	0	$4,500Exam only	Expert
SANS Security Awareness ProfessionalSANS Institute	—	0	$5,969Exam + training	Associate
Scaled Professional Scrum™ (SPS)Scrum.org	—	0	$250Exam only	Entry
Scrum Master (CSM)GAQM	—	0	$170Exam + training	Entry
SECO Information Security Management ExpertSECO Institute (DNV)	—	0	Not listed	Expert
Secure Programming Certified LeaderSECO Institute (DNV)	—	0	Not listed	Expert
Secure Programming FoundationSECO Institute (DNV)	—	0	Not listed	Entry
Security Analyst Level 1 (SAL1)TryHackMe	—	4	$349Exam only	Entry
Security, Associate (JNCIA-SEC)HPE Juniper Networking	—	0	Not listed	Associate
Security Awareness and Culture ProfessionalH Layer Credentialing	—	0	$369Exam only	Associate
Security, Specialist (JNCIS-SEC)HPE Juniper Networking	—	0	$300Exam only	Intermediate
Splunk Enterprise Security Certified Admin (Legacy)Splunk	—	0	$130Exam only	Intermediate
SUSE Certified Administrator in SUSE Linux Enterprise Server 15SUSE	—	0	$149Exam only	Associate
SUSE Certified Engineer in SUSE Linux Enterprise Server 15SUSE	—	0	$195Exam only	Intermediate
Systems Security Certified PractitionerISC2	—	0	$688Exam + training	Associate
TOGAF Enterprise Architecture FoundationThe Open Group	—	0	$405Exam only	Entry
TOGAF Enterprise Architecture PractitionerThe Open Group	—	0	$610Exam only	Intermediate
VMware Certified Distinguished ExpertBroadcom (VMware)	—	0	$250Exam only	Expert
VMware Certified Professional - Data Center VirtualizationBroadcom (VMware)	—	0	$250Exam only	Associate
VMware Certified Professional - Network VirtualizationBroadcom (VMware)	—	0	$250Exam only	Intermediate
Web Application Penetration TesterINE Security	—	0	$599Exam + training	Intermediate
Web Application Penetration Tester eXtremeINE Security	—	4	$599Exam + training	Expert
Worldwide Certified Network Analyst (WCNA)Protocol Analysis Institute	—	1	$299Exam only	Associate
Zachman Certified - Enterprise Architect Associate (Level 1)Zachman International	—	0	Not listed	Associate
Zachman Certified - Enterprise Architect Practitioner (Level 2)Zachman International	—	0	Not listed	Intermediate
Zachman Certified - Enterprise Architect Professional (Level 3)Zachman International	—	0	Not listed	Expert

Fact card

ISC2

Certified in Governance, Risk and Compliance

CGRC

Validates knowledge and skills to integrate governance, performance management, risk management and regulatory compliance, and to authorize and maintain information systems within risk management frameworks.

Cost

$599

Exam only

Exam only$599

Attempts1 attempt

Validity3 years

Renewal fee$135 per year

Renewal CPEs60 CPE every 3 years

Exam

FormatMultiple choice + performance-based

Duration3 hours

ReportNot required

Prerequisites

ExperienceSecurity risk management work in the 7 CGRC domains; pass the exam as an Associate of ISC2, 3 years to gain it

Prior certsNone

Recommended prepOfficial ISC2 CGRC training (online instructor-led or self-paced)

Roles and domains

Roadmap roles

GRC AnalystSecurity Engineer / Architect

Topics covered

Compliance and AuditGovernanceRisk ManagementSecurity Fundamentals

Ratings

— / 5 · Not enough ratings yet0 ratings · A score appears after 5

Definitely yes

Probably yes

Not sure

Probably not

Definitely not

Source: CGRC official page ↗

Methodology ChangelogDisclaimer: CyberDefenders certifications (CCDL1 and CCDL2) are scored and placed using the same rules as every other cert.

How to choose a cybersecurity certification

Choose a cybersecurity certification that matches the job you want, the skills you have and the requirements you can meet. Check these five factors before you pay.

01Target career roleRead the current exam objectives alongside real job postings. A SOC analyst needs different skills from a penetration tester, cloud engineer or auditor.
02Current skillsCompare the assumed knowledge with what you can actually do. Identify gaps in networking, operating systems and security, then try relevant hands-on tasks.
03EligibilitySeparate recommended preparation from mandatory work experience, prior qualifications, endorsements or training. Passing an exam does not always mean you can claim the credential immediately.
04

Choose certifications for your career path

Choose the cybersecurity role you want, then compare certifications that assess its day-to-day skills. The examples span different levels; they are options to investigate, not a required sequence or ranking.

SOC analyst certifications

SOC analysts investigate alerts, distinguish real threats from routine activity and document incidents. Look for an assessment that tests investigation and triage, not just terminology.

Skills: Log analysis, SIEM queries, alert triage, network traffic, endpoint evidence and incident notes.

Example certifications: CyberDefenders CCDL1, Blue Team Level 1 (BTL1), CompTIA CySA+ and CompTIA Security+ (foundational).

Explore SOC analyst certifications

Incident response and digital forensics (DFIR) certifications

Incident responders contain threats and support recovery; forensic analysts preserve and examine evidence to explain what happened. Match your next certification to incident handling or forensic investigation.

Skills: Evidence handling, Windows artifacts, disk and memory analysis, investigation timelines and reporting.

Example certifications: CyberDefenders CCDL2, GIAC Certified Forensic Examiner (GCFE) and GIAC Certified Forensic Analyst (GCFA).

Explore incident response and DFIR certifications

Penetration testing and red team certifications

Penetration testers find and report weaknesses within an authorized scope. Red teams simulate adversaries to test how well an organization detects and responds. Build testing fundamentals before advanced simulations.

Skills: Networking, web security, scripting, privilege escalation, Active Directory and remediation reports.

Example certifications: INE eJPT, TCM Security PNPT, OffSec OSCP and Zero-Point Security CRTO.

Explore penetration testing certifications

Cloud security certifications

Cloud security practitioners protect cloud identities, workloads, networks and data. Learn to operate a platform first; specialty certifications generally make more sense after practical cloud experience.

Skills: Identity and access management, cloud networking, logging, configuration, infrastructure as code and shared responsibility.

Example certifications: AWS Certified Security – Specialty and ISC2 Certified Cloud Security Professional (CCSP); check experience rules.

Explore cloud security certifications

Security engineering and architecture certifications

Security engineers build and maintain controls; security architects design how controls work together. Choose a certification that matches the systems you secure and the design decisions you handle.

Skills: System hardening, endpoint and network controls, identity, detection engineering and secure design.

Example certifications: GIAC Security Essentials (GSEC), Microsoft Security Operations Analyst Associate (SC-200) and ISC2 CISSP (experience required).

Explore security engineering certifications

Governance, risk and compliance (GRC) certifications

GRC practitioners assess risk, document policies, evaluate controls and support audits. Choose a credential for the work you want: risk management, assurance, audit or security governance.

Skills: Risk assessment, control frameworks, audit evidence, policy writing, third-party risk and communication.

Example certifications: ISC2 CGRC, ISACA CISA and ISACA CISM. Audit and management credentials have different experience requirements.

Explore GRC certifications

Compare cybersecurity certifications

Certified in Governance, Risk and Compliance

Compare cybersecurity certifications

How to choose a cybersecurity certification

Course-completion certificate vs. professional certification

Cybersecurity certifications for beginners

No IT background

Moving from IT into security

Choose certifications for your career path

SOC analyst certifications

Incident response and digital forensics (DFIR) certifications

Penetration testing and red team certifications

Cloud security certifications

Security engineering and architecture certifications

Governance, risk and compliance (GRC) certifications

How much does cybersecurity certification cost?

Plan your certification progression

Frequently asked questions

Which cybersecurity certification should I get first?

Do I need experience to get a cybersecurity certification?

How long does it take to prepare for a cybersecurity certification?

Are cybersecurity certifications enough to get hired?

What ongoing costs should I expect after earning a cybersecurity certification?

Build a certification path for your role, experience, and budget.