Is CS0-004 approved for DoD 8140?

CompTIA CySA+ CS0-004 (V4) launched on June 23, 2026. If you work in, or want to work in, government or defense-contractor cybersecurity, here is what matters about the new version.

CS0-004 at a glance

• Exam code: CS0-004 (V4)
• Launch date: June 23, 2026
• Questions: up to 85, multiple-choice and performance-based
• Time: 165 minutes
• Passing score: 750 on a scale of 100 to 900
• Recommended experience: about four years of hands-on cybersecurity experience, typically in a SOC or vulnerability analyst role
• Validity: three years, renewable through CompTIA's continuing education program

The format matches the previous version, CS0-003.

Is CS0-004 approved for DoD 8140?

CompTIA states that CySA+ is approved under DoD Directive 8140.03M requirements and that this continues with the V4 exam. CySA+ is listed as an approved foundational option for several DCWF work roles, including Cyber Defense Analyst, Incident Responder and Vulnerability Assessment Analyst. See the full list in CySA+ and DCWF work roles, and what the approval means in CySA+ and DoD 8140.

Remember that approval is one part of the qualification. Residential qualification and any extra component or contract requirements still apply.

What about CS0-003?

• If you already hold a CySA+ from CS0-003, it stays valid for its full three-year cycle and you do not need to retest on V4.
• If you are still preparing, check the CS0-003 retirement date before choosing a version. Training providers report different dates, with several citing December 22, 2026 for the English exam, and CompTIA has not been clear in everything we reviewed. Confirm with CompTIA before you plan around a deadline.
• If you are starting from scratch, study for CS0-004. There is little reason to learn a version that is on its way out.

Tips for government and contractor candidates

1. Identify your DCWF work role and level first. Your contract or position description should state it.
2. Check the matrix, not just the job posting. Older postings may use legacy 8570 language such as IAT Level II. See DoD 8570 vs 8140 and CySA+.
3. Mind the timeline. People assigned to a cyber work role are generally given a limited window to complete foundational qualification, so do not leave the exam until the last month.
4. Keep your certification active. A lapsed certification can mean a lapsed qualification. Track CEUs from the start.
5. Use official, authorized materials. CompTIA can revoke certifications of candidates who use unauthorized content.

How to prepare

CySA+ is scenario-heavy, so hands-on practice matters as much as reading. Our guide to CertMaster Study, Labs and Bundle options for CS0-004 explains which format suits you. If you are still at the Security+ stage, compare the two in Security+ vs CySA+ for DoD 8140.

Frequently asked questions

When did CySA+ CS0-004 launch?
June 23, 2026.

Is the exam harder than CS0-003?
The format and passing score are unchanged. Expect updated objectives and continued emphasis on scenarios and performance-based tasks.

Does my CS0-003 certification still count for DoD 8140?
CySA+ is approved as a certification, and a CS0-003 credential remains valid for three years. Confirm with your employer or the current matrix for your role.

Do I need to retake CySA+ for the new version?
No. A valid certification stays valid for its full cycle.

Written by an instructor who holds Security+, CySA+, PenTest+ and SecurityX. CertInstructor is an Authorized CompTIA Partner. We are not affiliated with the U.S. Department of Defense.