DoD CIO Issues DoD Manual for 8140 DCWF Workforce Compliance

It’s Official, the 8140 is Released:

For years, the market awaited the new Department of Defense Cybersecurity Workforce Framework (DCWF), which was finally released on February 15th, 2023. The 8140.03 Manual (8570/8140) is available online for review. As the Federal Government moves toward a competency-based approach to fill critical cybersecurity and risk management jobs, the 8140 provides a deeper dive into DCWF, training, and baseline certifications.

Along with the 8140 manual, you can also find a helpful tool issued by DoD to search for the necessary competencies vs. job code and/or role. You can search by Workforce Elements, Elements Mapping, Work Roles, and Knowledge-Skills-Abilities coding here. As we dig into Work Roles, such as the “All-Source Analyst,” you can see how deep the competency mapping of the National Initiative for Cybersecurity Education (NICE) framework (NIST 800-181) has gone, operated by the National Institute for Standards and Technology (NIST).

What Training Programs are Required Under DoD 8140?

Great question. Let’s first label the job role and then look at the multiple program levels for training and certification.

Information Assurance Technical (IAT)

Information Assurance Management (IAM)

Information Assurance System Architects and Engineers (IASAE)

Cyber Security Service Providers (CSSP)

CSSP Auditor

C|EH

CFR

Cloud+

CySA+

PenTest+