Interactive Javascript Proof of Concept

This fork is a proof of concept for converting Paul Jerimy's roadmap into an interactive version. The two key features added are:

1. Filtering certificates displayed by category and skill level, and
2. Rendering the certificates in a list for mobile screen sizes.

The proof of concept is focusing on demonstrating the new features, leaving the design until a later phase.

The first version is rendering the page without any libraries or frameworks. The state of the page is contained in the form controls which means a more complicated solution for managing state is not yet required. As the certificate grid is being rendered with JavaScript the exact positioning of each certificate in their respective category may be different to the original page.

Proof of concept progress

• Render the certificates from a JSON file
• Show/Hide certificates based on category and skill level
• Show certificate information in modal window
• Include sub categories and breakdown ops section into red and blue
• Alternative display for mobile devices

Filtering options

Mobile list view

Next steps

• Breakdown data into description and price
• Filter by certificate price
• Add more information to list view (e.g. display certificate skill level)
• Review certificate grid builder
• Add tests
• Explore rendering alternatives

How to run

1. Install NodeJS on your system so you can install the dependencies
2. Run npm i to install typescript and http-server.
3. Run npm run watch to compile the project and start a server for the files.
4. Open http://127.0.0.1:8080/interactive-roadmap.html

SecCertRoadmapHTML

Security Certification Roadmap HTML5/CSS3 version

This code is embedded inside the html page at https://www.pauljerimy.com/security-certification-roadmap/

I am open to restructing this html if a better way is known. I am a beginner at best when it comes to HTML and CSS.

Change Log

July 2024:

• Added GIAC certifications: GRTP, GEIR, GX-FA, GX-PT, GMLE
• Added ISACA certification: CCOA
• Added CyberDefenders certification: CCD (credit: 0xHasanM)
• Added TCM Security certification: PJMR (credit: Brandon-Russell-1)
• Added Hack the Box certifications: HTB CDSA, HTB CWEE
• Added The SecOps Group certifications: SOG CAP, SOG NSP, SOG CCSP-AWS, SOG CAPen, SOG CNPen, SOG CMPen And, SOG CMPen iOS, CCPenX-AWS, SOG CAPenX
• Added Fortinet certifications: FCF, FCA, FCP NS, FCP PCS, FCP SO, FCSS SO, FCSS OT, FCSS NS, FCSS SASE, FCSS PCS, FCSS ZTA, FCX
• Removed defunct Fortinet certifications: NSE 3, 4, 5, 6, 7, 8
• Removed defunct Palo Alto certifications: PA CRTP, and PA CRTE (credit: MaLevi4)
• Removed defunct Linux Foundation certification: LFCE (credit: MaLevi4)
• Removed defunct CREST certifications: CRTSA, CMRE (credit: sawft99)
• Removed defunct INE certifications: eCRE, eCPTX, eCMAP, eWDP, eCXD (credit: Brandon-Russell-1 & r-yu-2)
• Removed defunct GIAC certifications: GPPA, GEVA, and also ICS612 because its not a certification
• Removed defunct ISC2 certification: HCISPP
• Removed defucnct ISACA certifications: CSX-PA, CSX-T
• Removed defunct IA Certification certification: CEREA
• Moved GIAC GSE down 2 rows after removal of lab requirement
• Shortened Security+, SSCP, GSEC, Programming Languages, CASP+, CISSP, CISSP Concentrations, and GSE to cover 4 spaces in only GRC to make room for more certifications
• Shortened GREM to fit with the new size of the GRC certifications
• Corrected GIAC GPYC as a blue ops certification instead of a red ops
• Corrected (ISC)2 branding to ISC2 (credit: kabaki1982)
• Corrected lins for eLearnSecurity Certifications
• Corrected link for S-EHR (credit: kasperkarlsson)
• Corrected link to CISSP concentrations (credit: psarossy)
• Corrected links to CREST certifications (credit: sawft99)
• Corrected links for Cisco DevNet Pro and DevNet A
• Corrected spelling for PSM III and MTH description
• Corrected certification names for CREST CCTINF, CCTIM, CCHIA, CCTAPP, CCNIA, (credit: sawft99)
• Corrected certification name for SC-400 (credit: ep3p)
• Corrected certification name for AZ-305 (credit: wongsenoch)
• Corrected certification name for CAP to CGRC (credit: corbin-lounsbury)
• Corrected price for Splunk ECSA (credit: aserpi)
• Corrected prices for GIAC certifications
• Corrected prices for CompTIA certifications

February 2023:

• January's update was done to the wrong version which brought some old bugs back:
• Duplicate AZ-500 fixed to AZ-305
• Static mobile version changed back to dynamic

January 2023:

• Added ISC2 certification: CC
• Added ISMI certifications: CSM and CSMP
• Added OCEG certifications: GRCP and GRCA
• Added Zero Point Security certification: CRTO II
• Added GIAC certifications: GCTD and GCWN
• Added Scrum.org certifications: PSM I and PSM II
• Added IDPro certification: CIDPRO
• Added Mosse Institute: MSAF
• Added HTB certification: HTB CPTS
• Added Shared Assessments certifications: CTPRP and CTPRA
• Removed duplicate Zero Point CRTO
• Removed Mosse Institute MTCF (defunct)
• Removed SUSE SEA (defunct)
• Updated link and exam cost for eJPT
• Corrected CSP-SM as PSM III
• Corrected links for SUSE SCA and SCE
• Moved BSCP from Test to Penetration Testing
• Moved BSCP up 1 row
• Moved OSEE up 1 row
• Moved S-CISO down 5 rows
• Moved CIISec ICSF down 1 row
• Moved MTIA down 2 rows
• Moved MDSO down 2 rows
• Moved MVRE down 2 rows
• Moved MTH down 3 rows
• Moved MRT down 3 rows
• Moved MRE down 3 rows
• Moved MCD down 4 rows
• Moved MCSE down 5 rows
• Reduced Cloud+, Server+, and CCSP size to just the Security Architecture & Engineering - Cloud/SysOps sub-domain

August 2022:

• Added SANS certifications: GIME and GCFR
• Added SECO certifications: S-TA, S-SA, and S-CSPL
• Added Certiport certifications: ITS-C and ITS-NS
• Addied EC Council certification: CCSE
• Added Mile2 certifications: C)HISSP, C)ISRM, IS20, C)IHE, C)DRE, CM)ISSO, CM)IPS, and CM)DFI
• Added PCI certification: PCI QSA
• Added The H Layer certification: SACP
• Added Cyber Scheme certifications: CSTM and CSTL
• Added Microsoft certification: SC-100
• Added Hack the Box certification: HTB CBBH
• Removed duplicate PCNSA
• Removed CREST CWS
• Moved MCSE from Security Operations to Security Architecture and Engineering
• Moved GPEN up 1 row
• Moved CFCE up 1 row
• Moved C)ISSM up 2 rows
• Moved CISSM up 1 row
• Moved CAP up 1 row
• Moved HCISPP up 1 row
• Corrected HCISSP to HCISPP
• Corrected the CCIE Ent link
• Corrected SECO certification links and prices
• Corrected SANS certification prices from $849 to $949
• Corrected Offensive Security prices to $1499 except OSWE to $1649
• Other link and price fixes that I lost track of because I accidently closed this readme without saving

April 2022:

• Added Fair Institute certification: Fair Fdn
• Added Dark Vortex certifications: DV MoS, DV RTOS, DV OTD, DV AOPH, and DV MILF
• Added Mosse Institute certifications: MCSF, MICS, MTCF, MASE, MCL, MCPT, MCSE, MESE, MCPE, MDSO, and MVRE
• Added Mitre Att&ck certifications: MAD CTI and MAD SOCA
• Added EXIN certifications: 27001F, 27001P, and 27001E
• Added Axelos certifications: M_o_S Foundation and M_o_S Practitioner
• Added SANS certifications: GFACT, GSOC, and GPCS
• Added Microsoft certification: SC-400
• Added Fortinet certifications: NSE 3 and NSE 5
• Added Palo Alto certifications: PCCET, PCDRA, PCCSE, and PCSAE
• Added Mile2 certifications: C)SWAE, C)CSA, and C_TIA
• Added EC First certifications: CSCS, CCSA, and CCP
• Added PECB certifications: 27001F, 27001LI, 27001LA, 27032F, 27032CM, 27005RM, and 27005LM, and CLCSM
• Added Offensive Securiry certifications: OSDA, OSWA, and OSMR
• Added Docker certification: DCA
• Added Cloud Native Computing Foundation certifications: CKS, CKA, CKAD, and KCNA
• Removed Palo Alto certifications: PCCSA
• Removed Infosec Institute / IACRB certifications: CPT, CEPT, and CEREA which do not appear to be available at this time
• Removed Mile2 certifications: C)VE, C)VCP, C)VFE, and Red vs Blue
• Removed 9 Lunarline certifications as they were purchased by Motorola and the certifications appear to be discontinued: CEIM, CESO, CEPP, CERP, CEPM, CESA, CESE, CECS, and CEIA
• Removed GSSP which was retired
• Moved F5 CA up 3 rows
• Moved WCNA down 1 row
• Moved CCT down 1 row
• Moved OSCE3 up 1 row
• Moved DevNetA up 1 row
• Moved CCSC up 1 row
• Corrected Mile2 web links and exam prices from $400 to $550.
• Corrected C)PTC from "Expert" to "Consultant"
• Corrected IACRB certifications to reflect take over by Infosec Institute and new pricing: CSAP, CREA, CMWAPT, CRTOP, CDRP, CSSA, CCTHP, CMFE, and CCFE
• Corrected LPIC-1 and LPIC-2 to reflect they require 2 exams each, with each exam costing $200
• Corrected GIAC certifications to reflect the exam price drop from $1,999 to $849 if taken without a SANS course
• Corrected GREM certification link
• Corrected SF CIAMD to fit in it's container
• Corrected link to CIISec ICSF
• Renamed Microsoft certifications to their exam code. I.E., MSOAA is now SC-200
• Added hover text over domain titles with domain descriptions in line with the ISC2 CBK
• Added a row to the bottom of the certification to allow for more beginner level certifications
• Added a column on the left to add proficiency level indicators to the rows with: Beginner, Intermediate, and Advanced
• Added a column to Security Architecture & Engineering - Cloud/SysOps for container certs and more spacing
• Added a column to Security and Risk Management in order to add additional ISO/IEC 27000 certifications
• Added more code comments
• Redesigned tooltips to display in place (absolute to relative positioning)
• Added more contrast to colors: dark blue for blue team, lighter blue for software sec, darker purple for testing, grey for management, and lighter yellow for asset sec. (I tested magenta as a replacement for black and it was not pleasing on the eye.)

July 2021:

• Added Mosse Cyber Security Institute Certifications: MOIS, MNSE, MRCI, MBT, MDFIR, MGRC, MPT, MRE, MTH, MCD, MRT, and MTIA
• Added GIAC Certification: GCPN
• Added PDSO Certifications: CDP and CDE
• Added Microsoft Certification: MSOAA, MSCIF, and MIAAA
• Added Offensive Security Certification: OSED and OSCE3
• Added TCM Security Certification: PNPT
• Added Zero Point Security Certification: ZPRTO
• Added TUV Certifications: COSP, COSTE, and COSM
• Added EC Council Certification: CPENT
• Added (ISC)2 Certification: HCISSP
• Added Security Blue Team Certification: BLT2
• Removed CCAr due to it being retired March 1st, 2021
• Removed MTA due to that category of certification being retired on June 30th, 2021
• Removed ECSA due to it being retired May 15th, 2021
• Moved GCWN from the Unix to SysOps sub domain
• Moved eCIR up 1 row based on feedback
• Moved CSX-P down 3 rows based on feedback
• Moved CEPT down 7 rows and expanded into exploitation based on feedback
• Moved CPT down 5 rows based on feedback
• Moved eJPT up 1 row based on feedback
• Moved the CIST, CIGE, and SFCIAMD certifications up 1 row in the IAM domain
• Corrected the exam price for Offensive Security OSWE from $2799 to ~$1299
• Corrected the exam price for eJPT from $400 to $200
• Corrected the exam price for CFR from $149 to $250
• Corrected the exam price and link for KLCP
• Corrected the link for EITCA/IS
• Corrected the tooltip for S-CEHL due to a spelling typo
• Asset Security certifications now properly colored "yellow" instead of "orange"

February 2021:

• Added PAI Certification: WCNA
• Added eLearnSecurity Certification: eCMAP
• Added Cisco Certification: CCCOP
• Added Linux Foundation Certifications: LFCA, LFCS, and LFCE
• Added APMG Certifications: 27001F, 27001P, and 27001A
• Expanded the GRC sub-domain to 3 columns & shifted certifications accordingly
• Moved CCCOA from Network to Security Operations
• Corrections to CCCOA, IIA CIA, FortiNET NSE 8, CAD, CAC, CCSP, eCRE, and GCPEH

November 2020:

• Added to GitHub for pull requests
• Added Security Blue Team certification: BTL1
• Added Sales Force Certifications: SFCCCC, SFCIAMD, and SFCTA
• Added The Institute of Internal Auditors: CIA
• Added Offensive Security certification: OSEP
• Added Cisco Certification: CCCOA
• Removed Offensive Security OSCE (retired)
• Removed Cisco CCNA CyberOps (retired)
• Removed duplicate Pentester Academy CRTP
• Corrected links for Cloud+ and eWPTX
• Corrected Typo for NSCS Certs, OPSA, CCFE, and CCIE
• Corrected exam cost for AWS Security Spec and eWPTX

October 2020:

• Updated HTML/CSS logic to increase chart size
• Updated HTML/CSS logic to allow certifications to span domains
• Updated HTML/CSS logic to allow sub-domains
• Updated HTML/CSS logic to allow easier updates
• Changed hover text to be in a static location in order to avoid clipping
• Aligned columns/towers with (ISC)2 CBK Security Domains
• Moved certifications into new domains when applicable
• Adjusted rankings based on research and feedback
• Added Identity Management Institute certications: CIMP, CIAM, CIGE, CIST, CAMS, CIPA, CIMP, and CRFS
• Added EXIN Privacy certificationss: EPDPP, EPDPF, and EPDPE
• Added ISACA certification: CDPSE
• Added DRI certifications: DCCRP, DCRMP, DACRP, DCBCLA, and DCBCA
• Added QAI certification: CSBA
• Added APMG certifications: 20000P, 20000A, and 20000F
• Added Cisco certifications: DevNet Pro, and DevNet Associate
• Added Pentester Academy certifications: CRTP, CRTE, and PACES

September 2020:

• Removed GIAC GCUX – indefinitely unobtainable
• Corrected price on SABSA courses for North America ($400 lower)
• Removed MCSA and MCSE retiring in Jan 2021
• Removed Windows sub-domain migrating remaining certs to other appropriate sub-domains
• Named Linux sub-domain as “*nix” to reflect inclusion of Unix based certifications
• Added Microsoft 365 EAE
• Added Microsoft Azure Fundamentals

July 2020:

• Added description of certification categories
• Added static chart for mobile and small screen users
• Added description and link to “Programming Languages”
• Fixed cert name spacing issues
• Moved OSCP up one rung due to 2020 refresh
• Added IIBA Certificate Cybersecurity Analysis
• Added AWS Security Specialist
• Added TUV Certified Operational Technology Cybersecurity Professional
• Added TUV Cybersecurity Specialist
• Added TUV Cybersecurity Awareness
• Added TUV Internal Auditor ISO 27001:2013, Information Security Management Systems
• Added TUV IT Security Auditor
• Added TUV IT Security Manager
• Added TUV Mobile Security Analyst
• Added Excida CACS
• Added Excida CACE
• Added GIAC Enterprise Vulnerability Assessor
• Added GIAC Battlefield Forensics and Acquisition
• Added GIAC Cloud Security Automation
• Added GIAC Open Source Intelligence
• Added Pentester Academy Certified Red Team Professional
• Added Pentester Academy Certified Red Team Expert

March 2020:

• Migrated from powerpoint image to HTML/CSS5 interactive chart
• Added mouse over information for exam price and if a course is required
• Added link to certification websites
• Included 324 certifications

December 2019:

See roadmap here: https://www.pauljerimy.com/OC/Security%20Certification%20Progression%20Chart%20v6.2.png

• Changes towers from job types to security domains
• Added many certifications
• Moved some certifications up or down
• Moved categories so engineering and architecture are side by side due to their relation
• Changed Security Engineering to Security Implementation
• Marked Sec+, SSCP, GSEC, Programming languages, CASP, CISSP, GSE as core certifications with a gradient & note
• Added a version, date, and author
• Removed the self explanatory key
• Removed the color for "software"
• Minor formatting changes

November 2018:

See roadmap here: https://www.pauljerimy.com/OC/Security%20Certification%20Progression%20Chart%20v5.2.png

• Rebuilt roadmap from old image
• Added many certifications
• Removed DoD 8570.01M indicators
• Condensed certifications for easier viewing

July 2015 By Drackar of wwww.techexams.net:

See roadmap here: https://www.pauljerimy.com/OC/Security%20Certification%20Progression%20Chart%20v4.0.png

• Added Malware Analysis
• Added IT Security Auditor
• Added additional certifications
• Changed rankings

November 2014 By Drackar of www.techexams.net:

See roadmap here: https://www.pauljerimy.com/OC/Security%20Certification%20Progression%20Chart%20v3.0.png

• Color coded domains
• Indicated DoD 8570 alignment
• Added key
• Added certifications
• Rearranged ranking