The certifications DoD 8140 actually asks for: studied properly.
4 of our 5 certification tracks appear in the DoD 8140 qualification matrix: Security+, CySA+, CISSP and CCSP. Across those four: every objective the exam boards publish, 1,715 practice questions and 2,568 pages, as a downloadable PDF that keeps working when the connectivity does not.
No card. No account. The complete guide, not a preview.
Credentialing Assistance and COOL fund exam vouchers, and in some branches training from approved vendors. We are not an approved vendor, so assume a guide is out of pocket.
That matters less than it sounds. The exam is the expensive part and the part most likely to be covered. The guide is $14.95–$24.95.
Air Force COOL is the exception that names study materials outright. Airmen and Guardians, ask your education center what is in scope this fiscal year.
If someone told you “Security+ gets you IAT Level II”, that guidance is retired.
DoD Directive 8140.01 and the 8140 Cyber Workforce Qualification Program replaced DoD 8570.01-M, and the IAT, IAM and IASAE level tables went with it. A great deal of study material, and some unit guidance, still quotes those tables as though they were current.
Work roles, not levels
You qualify against a specific DoD Cyber Workforce Framework work role, identified by a role code, rather than against a broad IAT or IAM tier.
Proficiency matters
Each work role is qualified at a proficiency level: basic, intermediate or advanced. The same credential can satisfy one level of a role and not the next.
It does not carry across
A credential approved for one work role does not automatically qualify you for another. This is the single biggest change from 8570, and the one that catches people.
So do this first, before you spend a dollar: ask your supervisor or ISSM for your assigned work role code, then check that code against the current qualification matrix. It is updated quarterly, which is exactly why this page links to it rather than reproducing it, because a copy here would be wrong within a quarter.
Which certification, and who it is for
Four of the five exams we cover appear in the qualification matrix. The fifth is listed here too, honestly labeled, because selling a brand-new exam as a billet qualifier would be a lie you would discover at the education center.
Who it is for. Anyone who needs a baseline cyber credential to hold or move into a cyber billet, and the most common first certification in the force.
How it is used. The most widely accepted foundational credential across cybersecurity work roles at the basic proficiency level.
Who it is for. Defensive cyber operators, SOC and watch-floor analysts, and anyone whose day is alerts, triage and threat hunting.
How it is used. Analyst-side work roles (detection, incident handling and vulnerability analysis) at basic to intermediate proficiency.
Who it is for. Senior NCOs, warrant officers, officers and civilians moving into management, ISSM or architecture responsibility. Needs five years' experience to hold.
How it is used. The broadest single coverage of any credential: management, architecture and senior technical roles at intermediate to advanced proficiency.
Who it is for. Anyone whose mission has moved to cloud, and given the department's cloud contracts, that is most people eventually.
How it is used. Cloud-focused security work roles, and the credential that distinguishes you once everyone around you holds Security+.
Who it is for. Early movers who want the AI-and-security intersection on their record before it becomes a requirement.
How it is used. Not on the qualification matrix, because it is too new. Career positioning, not a billet qualifier.
How credentialing works where you serve
The programs differ more than most pages admit. One branch names study materials outright, another has no voluntary credentialing funding at all this fiscal year. Checked August 2026; verify against the linked source and your education center, because these rules move every fiscal year.
U.S. Army
Army Credentialing Assistance (CA), via ArmyIgnitED
What it funds. Exam fees, recertification, and (unusually among the branches) books, materials and related costs for credentials on the Army COOL list. CA is separate from Tuition Assistance and does not consume your TA.
Watch for. As of 19 March 2026 every CA request needs supervisor or commander-representative approval inside ArmyIgnitED, regardless of rank. Build that into your timeline: approval before you book the exam, not after.
U.S. Navy
Navy COOL
What it funds. Historically exam vouchers for pre-approved credentials tied to your rating. Navy COOL remains the route, and the credential list is still the reference for what counts.
Watch for. Be aware before you plan around it: no funding was allocated for voluntary credentialing exams in FY26, and the officer funding pilot's results are still with OPNAV. Enlisted Sailors can request funding for GED, SAT and ACT. If you are a Sailor, assume you are self-funding the exam this year and check with your Navy College office rather than the other way round.
U.S. Marine Corps
Marine Corps COOL
What it funds. Exam vouchers for credentials mapped to your MOS, requested through your education center.
Watch for. Mapping is MOS-driven, so the credential has to be on your MOS's list, not merely on the DoD 8140 matrix. Those are two different lists and people conflate them constantly. Check your MOS page first.
U.S. Air Force
Air Force COOL
What it funds. Up to $4,500 per fiscal year covering exams, prep courses and study materials. It is the most generous of the branch programs, and the only one that routinely says 'study materials' out loud.
Watch for. It is per fiscal year and it does not roll over. If you are going to sit two exams, plan which fiscal year each falls in rather than losing half the allowance.
U.S. Space Force
Air Force COOL (Guardians are covered)
What it funds. Guardians use the AF COOL program on the same terms as Airmen, including the same annual ceiling.
Watch for. Given how much of the Space Force mission is cloud and ground-segment software, CCSP is worth considering earlier than the usual Security+ → CySA+ ladder would suggest.
U.S. Coast Guard
Coast Guard COOL
What it funds. Exam vouchers for credentials mapped to your rating, through the CG COOL program.
Watch for. The Coast Guard sits under DHS, not DoD, day to day. But Coast Guard cyber billets still reference the DoD 8140 framework, so the credential you need is usually the same one. Confirm against your rating page.
National Guard & Reserve
Your component's CA or COOL program
What it funds. Guard and Reserve members are generally eligible for their component's credentialing program, and state-level programs sometimes add to it.
Watch for. Eligibility often depends on drilling status and can differ from the active-component rules, so verify with your unit's education services officer rather than assuming the active-duty answer applies.
Transitioning, a veteran, or a military spouse
Post-9/11 GI Bill: licensing & certification
Veterans and eligible service members
The VA reimburses approved certification test fees, and a test fee claim uses only a fraction of a month of entitlement rather than a whole month. Worth knowing if you are weighing whether to spend entitlement on an exam.
DoD SkillBridge
Service members in their last 180 days
An industry placement during your final months in uniform, on military pay. Holding the certification the host organization would otherwise have to train you in is a strong position to apply from. This is where certifications convert into a job offer rather than a line on a résumé.
MyCAA
Spouses of E1–E5, W1–W2 and O1–O2
Military Spouse Career Advancement Accounts fund licenses, certifications and associate degrees for eligible spouses. Cybersecurity certification is a genuinely portable career for a family that moves every few years, because the credential does not care which base you are at.
Your installation education center
Everyone
The single highest-value hour you can spend. They know the current fiscal-year rules for your branch, your eligibility, and which vendors are approved, which is the part that changes most often and that no third-party page can tell you reliably.
Why a PDF beats a subscription when you are underway
Works offline, entirely
Every guide is a downloadable PDF as well as a web version: the same document, not a summary. Practice questions and answer key included. Download before you lose bandwidth.
Nothing expires
One purchase, yours permanently, with free updates through the next exam version. No seat to keep alive while you are deployed and not studying.
Buy one domain at a time
Guides start at $14.95. If your study time comes in unpredictable blocks, buying the domain you are working on beats committing to a course you will not finish this rotation.
Printable
Letter-size, laid out for print. If your workspace is a SCIF or a space where personal devices do not come in, paper is the format that gets through the door.
Questions service members actually ask
Does DoD 8570 still apply, or is it 8140 now?
It is 8140. DoD Directive 8140.01 and the DoD 8140 Cyber Workforce Qualification Program replaced the 8570.01-M Information Assurance Workforce Improvement Program, and the old IAT/IAM/IASAE level tables went with it. Plenty of study sites and even some unit guidance still quote the 8570 tables, which is why people arrive expecting 'Security+ equals IAT Level II'. Under 8140 you qualify against a specific DoD Cyber Workforce Framework work role at a specific proficiency level, and a credential approved for one work role does not automatically carry to another.
Which certification does my billet actually require?
That depends on your assigned work role code and proficiency level, and the only authoritative answer is the current DoD 8140 qualification matrix, which is updated quarterly. Ask your supervisor or ISSM for your work role code first, then check it against the matrix. Anyone who tells you a single certification blanket-qualifies you without asking your role code is working from the retired framework.
Will Credentialing Assistance or COOL pay for these study guides?
Assume not. Those programs fund exam vouchers and, in some branches, training from approved vendors. Skillthropic is not an approved vendor, and buying a guide direct is out of pocket. That is a smaller problem than it sounds: the exam voucher is the expensive part and is the part most likely to be covered, while a guide is $14.95–$24.95. Air Force COOL is the one program that explicitly covers study materials, so Airmen and Guardians should ask their education center what is in scope this fiscal year.
I deploy, or I am on a ship with bad connectivity. Does that work?
Yes, and it is the reason the PDF matters. Every guide is a downloadable PDF as well as an interactive web version: the same document, not a summary. Download it before you lose bandwidth and the whole thing works offline, including the practice questions and answer key. Nothing expires and there is no seat to keep active while you are gone.
Which one should I start with?
For most people in uniform, Security+. It is the most widely accepted foundational credential, it is the one most cyber billets reference first, and it is the one civilian employers screen for after you transition. From there, CySA+ if your work is defensive operations and analysis, CISSP once you have the five years of experience and are moving into management or architecture, and CCSP if your mission has moved to cloud.
Is Skillthropic affiliated with the Department of Defense?
No. Skillthropic is an independent publisher and is not affiliated with, endorsed by, or approved by the Department of Defense, any branch of the U.S. Armed Forces, the Department of Veterans Affairs, CompTIA or ISC2. The certification and funding information on this page is provided to help you find the official source, and the official sources are linked throughout, so always verify against them.
Find out where you actually stand, free, in ten questions.
The readiness quiz scores you domain by domain, so you finish knowing which one is costing you marks rather than a vague sense that you should study more.
Skillthropic is an independent publisher. We are not affiliated with, endorsed by, sponsored by, or approved by the U.S. Department of Defense, any branch of the U.S. Armed Forces, the Department of Veterans Affairs, CompTIA or ISC2. Certification, qualification and funding information on this page was checked in August 2026 and is provided to help you reach the official source, because program rules change every fiscal year, so verify against the linked official pages and your installation education center before making any decision.