The quick answer
Pick the pathway that matches the job you want next. Help Desk is the entry ramp. Network Engineer, Cybersecurity Analyst and Penetration Tester are the hands-on technical tracks. Cloud Security Engineer and Azure Cloud Administrator cover the two major clouds. Governance, Risk and Audit is for people who audit, measure risk and authorize systems. Security Manager is for people who will own the program. IT Project Manager is for people who will lead delivery. Every stack below is the same one we teach on the live pathway page.
- 9Training pathways mapped to roles
- 3 certsTypical stack per pathway
- 98.8%Pass rate across 2,405 certified students
- 21%BLS projected growth for information security analysts, 2025 to 2035
Employers do not hire "someone with certs." They hire people who can do a job. A pathway is just a clear order of certifications that builds the skills that job needs, without wasting a seat on the wrong exam. We built nine of them for the roles we train for every week. The stacks below match our live pathway pages, and the exam details come from the certifying bodies, checked in October 2026.
One demand figure worth knowing up front. The U.S. Bureau of Labor Statistics projects employment of information security analysts to grow 21 percent from 2025 to 2035, much faster than the average for all occupations, with about 14,100 openings a year. Several of the pathways below feed that occupation and the roles next to it. We do not invent salary or demand numbers beyond what a cited source shows.
All nine pathways side by side
| Pathway | Role focus | Cert sequence | Details |
|---|---|---|---|
| IT Help Desk Specialist | Help desk, desktop support, technical support and entry NOC work | A+, Network+, Security+ | Pathway page |
| Network Engineer | Build and run campus and enterprise networks | Network+, CCNA, CCNP Enterprise | Pathway page |
| Cybersecurity Analyst | Defend networks and respond to alerts in a SOC or cyber defense team | Network+, Security+, CySA+ | Pathway page |
| Penetration Tester | Find and prove weaknesses before an attacker does | Security+, PenTest+, CEH | Pathway page |
| Cloud Security Engineer | Build and secure cloud workloads, starting on AWS then across clouds | SAA, Security Specialty, CCSP | Pathway page |
| Azure Cloud Administrator | Run Microsoft Azure day to day, then secure it | AZ-900, AZ-104, SC-500 | Pathway page |
| Governance, Risk and Audit | Audit systems, measure IT risk and authorize systems for use | CISA, CRISC, CGRC | Pathway page |
| Security Manager | Own the security program, not only the tools | Security+, CISM, CISSP | Pathway page |
| IT Project Manager | Lead IT projects across predictive, agile and hybrid work | CAPM, PMP, PMI-ACP | Pathway page |
Jump to a pathway:
- IT Help Desk Specialist
- Network Engineer
- Cybersecurity Analyst
- Penetration Tester
- Cloud Security Engineer
- Azure Cloud Administrator
- Governance, Risk and Audit
- Security Manager
- IT Project Manager
How to choose a pathway
Start on Help Desk
A+, Network+ and Security+ get you tickets, troubleshooting and a security baseline. From there you can branch into networking or analysis.
Analyst or Pen Tester
Defensive SOC work uses Network+, Security+ and CySA+. Offensive testing uses Security+, PenTest+ and CEH.
AWS or Azure path
Pick the cloud your shop runs. AWS security ends at CCSP. Azure admin ends at SC-500 after AZ-900 and AZ-104.
GRC path
CISA, CRISC and CGRC cover audit, risk and system authorization, including RMF-style work.
Security Manager
Security+, CISM and CISSP for people who will own the program.
IT Project Manager
CAPM, PMP and PMI-ACP for predictive and agile delivery.
Tip. You can start mid-pathway. If you already hold Security+, you do not retake it just to "complete" a stack. Tell us what you hold and we place you on the next exam that actually moves the job forward.
IT Help Desk Specialist Training Pathway
- 1A+
- 2Network+
- 3Security+
What the role does
Help desk specialists are the first stop when hardware, software or accounts break. They troubleshoot tickets, walk users through fixes, image devices and escalate what they cannot resolve.
Why this cert order works
A+ builds the hardware, OS and support foundation. Network+ adds the connectivity knowledge most tickets eventually need. Security+ teaches the risk and access mindset modern support desks expect, including in DoD aligned environments.
Who it suits
Career changers, people new to IT, and military members starting in support. No prior IT job is required.
Prerequisites
No experience required. Plan about three months for the full stack when you study part-time with a clear exam schedule.
Course pages: CompTIA A+, CompTIA Network+, CompTIA Security+. Full program details: IT Help Desk Specialist Training Pathway.
Network Engineer Training Pathway
- 1Network+
- 2CCNA
- 3CCNP Enterprise
What the role does
Network engineers design, configure and troubleshoot the routers, switches and wireless that keep sites talking. Senior work includes campus architecture, assurance and automation.
Why this cert order works
Network+ gives vendor-neutral basics every ticket still needs. CCNA puts those skills on Cisco gear. CCNP Enterprise, starting with ENCOR, is the cert that says you can run an enterprise network. Cisco also requires one concentration exam for the full CCNP Enterprise credential.
Who it suits
Support techs moving into networking, NOC staff, and people who already know subnetting and want Cisco depth.
Prerequisites
No networking job is required for Network+. If you already know addressing and subnetting well, you can start at CCNA. Brand new to IT? Start on the Help Desk pathway first.
Course pages: CompTIA Network+, Cisco CCNA, Cisco CCNP Enterprise. Full program details: Network Engineer Training Pathway.
Cybersecurity Analyst Training Pathway
- 1Network+
- 2Security+
- 3CySA+
What the role does
Cybersecurity analysts watch for threats, triage alerts, hunt inside logs and SIEM tools, prioritize vulnerabilities and help the organization respond when something gets through.
Why this cert order works
You cannot defend a network you cannot read. Network+ teaches how traffic moves. Security+ covers threats, controls and the baseline many DoD cyber jobs filter on first. CySA+ is the analyst step: SIEM and EDR analysis, threat hunting, vulnerability work and incident response.
Who it suits
IT support people moving into security, network techs who want defensive work, and career changers who will put in the study time for three CompTIA exams.
Prerequisites
Networking basics help. If you already hold Security+, you can start nearer CySA+. CompTIA exams have no experience gate to sit the test.
Course pages: CompTIA Network+, CompTIA Security+, CompTIA CySA+. Full program details: Cybersecurity Analyst Training Pathway.
Penetration Tester Training Pathway
- 1Security+
- 2PenTest+
- 3CEH
What the role does
Penetration testers scope engagements, recon targets, exploit weaknesses in networks, apps and cloud, and write reports clients can actually fix from.
Why this cert order works
Security+ teaches the controls you will later try to break. PenTest+ covers planning, testing and reporting. CEH is EC-Council's ethical hacking cert that many employers and government contracts still name by name. The two offensive certs overlap, but they are not the same exam.
Who it suits
Security analysts who want offensive work, network engineers who like breaking things in a lab, and people targeting red team or vulnerability assessment roles.
Prerequisites
Networking basics help a lot. If networking is new, take Network+ first. You can skip Security+ if you already hold it.
Course pages: CompTIA Security+, CompTIA PenTest+, EC-Council CEH. Full program details: Penetration Tester Training Pathway.
Cloud Security Engineer Training Pathway
- 1SAA
- 2Security Specialty
- 3CCSP
What the role does
Cloud security engineers design secure cloud architectures, lock down identity and data, watch for threats and apply the same discipline when work spans more than one cloud.
Why this cert order works
You cannot secure an AWS account you do not understand. Solutions Architect Associate teaches how AWS workloads are built. Security Specialty covers detection, response, data protection and identity on AWS. CCSP is vendor-neutral cloud security, which hiring managers ask for in senior and government roles.
Who it suits
Cloud engineers moving into security, security people learning AWS, and DevSecOps staff who need a named stack.
Prerequisites
Some IT or networking background helps. If you already hold Solutions Architect Associate or build on AWS daily, start at Security Specialty. ISC2 asks for experience before the full CCSP credential, though you can pass the exam first and become an Associate of ISC2 while you earn the required experience.
Course pages: AWS Solutions Architect Associate, AWS Security Specialty, ISC2 CCSP. Full program details: Cloud Security Engineer Training Pathway.
Azure Cloud Administrator Training Pathway
- 1AZ-900
- 2AZ-104
- 3SC-500
What the role does
Azure administrators manage identities, compute, storage, networking and monitoring in Microsoft Azure. The security step covers protecting cloud and AI workloads.
Why this cert order works
AZ-900 is the cloud and Azure basics exam with no prior cloud job assumed. AZ-104 is the day-to-day admin cert. SC-500 is Microsoft's Cloud and AI Security Engineer Associate. It replaced AZ-500 after Microsoft retired that exam on August 31, 2026.
Who it suits
Microsoft 365 admins moving into Azure, Windows sysadmins, and people targeting Azure administrator or cloud security roles in Microsoft shops.
Prerequisites
No Azure experience required to start at AZ-900. If you already work in Azure, start at AZ-104. Associate certs renew each year through a free online assessment on Microsoft Learn. AZ-900 does not expire.
Course pages: Microsoft Azure Fundamentals (AZ-900), Microsoft Azure Administrator (AZ-104), Microsoft Cloud and AI Security Engineer (SC-500). Full program details: Azure Cloud Administrator Training Pathway.
Governance, Risk and Audit Training Pathway
- 1CISA
- 2CRISC
- 3CGRC
What the role does
GRC professionals audit controls, assess IT risk, build risk responses and take systems through authorization frameworks such as the NIST Risk Management Framework.
Why this cert order works
CISA proves you can audit systems and controls. CRISC proves you can identify and manage IT risk. CGRC (formerly CAP) proves you can authorize and monitor systems. Together they cover the work auditors, ISSOs and GRC leads get paid to do.
Who it suits
IT auditors, compliance staff, ISSOs, security control assessors and anyone doing RMF packages for a federal agency or contractor.
Prerequisites
ISACA asks for experience for the full CISA and CRISC credentials. ISC2 asks for experience in CGRC domains. You can pass the exams first and earn the experience after. Order is flexible if your job is RMF-heavy.
Course pages: ISACA CISA, ISACA CRISC, ISC2 CGRC. Full program details: Governance, Risk and Audit Training Pathway.
Security Manager Training Pathway
- 1Security+
- 2CISM
- 3CISSP
What the role does
Security managers set governance, manage risk, run the security program and lead incident response. The work is people, process and business judgment as much as technology.
Why this cert order works
Security+ sets the technical base so you can lead engineers without guessing. CISM is ISACA's management cert for governance, risk and running a program. CISSP is the broad cert that shows up on manager, architect and CISO posts. We put CISM before CISSP because its four domains are narrower and management-focused. If your job or contract names CISSP first, we can switch the order.
Who it suits
Hands-on security people moving into ownership of the program, ISSMs, and analysts preparing for manager titles.
Prerequisites
Security+ is open to anyone. CISM and CISSP have experience rules for the full credential. You can pass those exams first and prove the experience afterward.
Course pages: CompTIA Security+, ISACA CISM, ISC2 CISSP. Full program details: Security Manager Training Pathway.
IT Project Manager Training Pathway
- 1CAPM
- 2PMP
- 3PMI-ACP
What the role does
IT project managers plan scope, schedule, budget and risk, lead teams and keep delivery tied to business goals. Agile leads do the same work inside Scrum, Kanban and hybrid teams.
Why this cert order works
CAPM covers the basics for people new to project work and needs no project experience, only 23 contact hours of project management education. PMP is the cert project manager job posts ask for most. PMI-ACP proves you can lead agile teams too. You get predictive and agile coverage in one path, taught to the outlines PMI is testing now. PMI moved to an updated PMP exam on July 9, 2026.
Who it suits
Project coordinators, analysts, technical leads taking on delivery, and experienced PMs who still need the PMP or an agile credential.
Prerequisites
CAPM needs 23 contact hours of project management education and no project experience. PMP needs 35 hours of project management training (or an active CAPM) plus non-overlapping experience leading projects in the last 10 years: 60 months with a high school diploma, 48 with an associate degree, 36 with a bachelor's degree, or 24 with a PMI GAC program degree. PMI-ACP needs agile experience (typically 2 years in the past 5 years, with shorter paths if you hold PMP or certain other credentials) plus 21 hours of agile training. You can skip CAPM if you already meet the PMP rules.
Course pages: PMI CAPM, PMI PMP, PMI-ACP. Full program details: IT Project Manager Training Pathway.
How pathways connect
Most people do not stay on one path forever. These moves show up often in our advising conversations.
Help Desk into Network or Analyst
Finish A+, Network+ and Security+ on the Help Desk path, then branch. Network+ and Security+ already unlock the Network Engineer path (start at CCNA) or the Cybersecurity Analyst path (start at CySA+ if Security+ is done).
Analyst into Penetration Tester
After Network+, Security+ and CySA+, move into PenTest+ and CEH. You already hold the Security+ step that pathway starts with.
Analyst into Security Manager
Security+ carries over. Add CISM and CISSP when you are ready to own the program instead of only the alerts.
Azure vs AWS security
Pick the cloud your employer runs. Azure Cloud Administrator ends at SC-500. Cloud Security Engineer builds on AWS then finishes with vendor-neutral CCSP. People who hold both cloud stacks are rare and in demand inside multi-cloud teams.
Into Governance, Risk and Audit
Security managers and federal contractors often add CISA, CRISC or CGRC when the job turns toward audit, risk or RMF authorization. Those three stand on their own if that is already your work.
Technical lead into Project Manager
Engineers who already coordinate releases often start at CAPM or go straight to PMP when they meet PMI's experience rules, then add PMI-ACP for agile teams.
Training with Accumentum
We teach these pathways with expert-led classes, current exam outlines and a schedule built around your work hours. Accumentum is a CompTIA Authorized Partner and an AWS Authorized Training Partner. Army CA and Air Force COOL Approved Vendor when military education benefits apply. Since August 2022, 2,405 students have certified out of about 2,435 attempts, a 98.8% pass rate.
Pay monthly
PathPay spreads course cost into monthly payments. Exam vouchers stay separate unless noted. PathPay is a payment plan, not a loan.
PathPass
PathPass has practice banks for many of the exams on these paths, with a free preview before you subscribe.
Map your first step
Email info@accumentum.net with your background and the role you want. We will point you at the right pathway page and the right first exam.
Frequently asked questions
Which Accumentum training pathway should I start with?
Start from the job you want next, not from the longest list of certs. Brand new to IT? Use the Help Desk pathway. Already in support and aiming at security? Use Cybersecurity Analyst. Already in security and aiming at leadership? Use Security Manager. An advisor can place you on the right first exam in one conversation.
Do I have to take every cert in a pathway?
No. Each course also stands on its own. Pathways show the order that builds skill without gaps. If you already hold an early cert, skip ahead.
Are these pathways the same as DoD 8140 work roles?
Not exactly. Several certs on these paths appear in the DoD 8140 Foundational Qualification Matrix, and our pathway pages call out the common mappings. Your billet and proficiency level decide what counts. Ask us to check before you enroll if you need a specific work role.
How long does a full pathway take?
It depends on your background, weekly study time and exam dates. Many students finish an early CompTIA step in about 4 to 8 weeks part-time. Later exams go deeper. We map a schedule to your work hours instead of a fixed calendar.
What is Accumentum's pass rate?
Since August 2022, 2,405 Accumentum students have certified out of about 2,435 attempts, a 98.8% pass rate.
Is Accumentum authorized to teach these vendors?
Accumentum is a CompTIA Authorized Partner and an AWS Authorized Training Partner. Army CA and Air Force COOL Approved Vendor when military education benefits apply. For other vendors on these paths we teach to the published exam outlines with expert-led classes. We do not claim partner or authorized status we do not hold.
Can I use PathPay or military funding?
PathPay spreads course cost into monthly payments. It is a payment plan, not a loan. For Army Credentialing Assistance or Air Force COOL, get approval before you enroll. See our Army CA and Air Force COOL pages.
Where do salaries fit into this guide?
We do not invent salary ranges here. For one verified outlook figure, the U.S. Bureau of Labor Statistics projects employment of information security analysts to grow 21 percent from 2025 to 2035, much faster than the average for all occupations, with a May 2025 median pay of $129,180. Check the BLS page linked in Sources for the current numbers.
Sources
Pathway stacks, role language and exam figures below were checked against Accumentum pathway pages and the linked vendor pages in October 2026. Confirm exam rules and fees on the vendor sites before you schedule.
- Accumentum pathway pages (live stacks and advising copy): Help Desk, Network Engineer, Cybersecurity Analyst, Penetration Tester, Cloud Security Engineer, Azure Cloud Administrator, Governance, Risk and Audit, Security Manager, IT Project Manager
- U.S. Bureau of Labor Statistics, Occupational Outlook Handbook, Information Security Analysts: 21% projected growth 2025 to 2035, about 14,100 openings a year, May 2025 median pay $129,180 (page visited October 27, 2026): bls.gov information security analysts
- CompTIA Network+: comptia.org Network+
- CompTIA Security+: comptia.org Security+
- CompTIA CySA+: comptia.org CySA+
- CompTIA PenTest+: comptia.org PenTest+
- CompTIA A+ (Help Desk foundation): comptia.org A+
- Cisco CCNA exam page: cisco.com CCNA
- Cisco ENCOR (CCNP Enterprise core): cisco.com ENCOR
- EC-Council CEH: eccouncil.org CEH
- AWS Certified Solutions Architect Associate: aws.amazon.com SAA
- AWS Certified Security Specialty: aws.amazon.com Security Specialty
- ISC2 CCSP: isc2.org CCSP
- ISC2 Associate of ISC2 (pass the exam first, earn experience after): isc2.org/certifications/associate
- ISC2 CISSP: isc2.org CISSP
- ISC2 CGRC: isc2.org CGRC
- ISACA CISM: isaca.org CISM
- ISACA CISA: isaca.org CISA
- ISACA CRISC: isaca.org CRISC
- Microsoft Learn, Exam AZ-500 study guide (retired August 31, 2026, 11:59 PM CST) and replacement by Cloud and AI Security Engineer Associate (SC-500): AZ-500 study guide, retired courses (AZ-500T00 → SC-500T00)
- Project Management Institute: PMP requirements and July 9, 2026 exam update (PMP, 9 July 2026 launch), CAPM, PMI-ACP