What is DoD Manual 8140?

Person looking at monitor

The U.S. Department of Defense Manual 8140.03 (DoDM 8140.03), released in February 2023, is part of the Department of Defense’s cybersecurity workforce management framework. It’s related to the DoD’s Cyber Workforce Development Program and provides guidance on cyber workforce roles, training requirements, and qualifications. DoDM 8140.03 replaces DoD Directive 8570.01-M.

What Is The Goal Of DoDM 8140.03?

DoDM 8140.03 aims to provide a qualification standard focused on an individual’s capability in performing the required functions of their job role. In doing so, 8140.03 offers a larger catalog of training and certification options to achieve compliance across their 72 defined job roles, compared to the DoD 8570.01-M. Job roles are grouped under the following broader workforce elements:

  • IT (Cyberspace)
  • Cybersecurity
  • Cyberspace Effects
  • Intelligence (Cyberspace)
  • Cyberspace Enablers
  • Software Engineering
  • Data/AI

How To Get DoD 8140 Certified

Every work role under DoDM 8140.03 provides a listing of Knowledge, Skills, Abilities and Tasks (KSATs) an individual should meet for compliance within that job functions. Qualifying these KSATs can occur through a number of ways including:

  • Earning a degree from a designated institution
  • Completing DoD/Military or Commercial Training
  • Achieving industry certification
  • Relevant work experience
  • On-the-job qualification or environmental-specific requirements

To learn which KSATs you need to achieve, find and select your work role on the DoD Elements Map. Once you open the specific work role, you will find a listing of the Core and Additional KSATs for that role. You may also find a Qualification Matrix, such as the one below, which identifies the pre-approved Basic, Intermediate and Advanced qualification options for that work role.

Which Industry Certifications Qualify Job Roles Under DoD 8140?

While every job role has its own qualifications listings, the following certifications have been pre-approved for some job roles as of November 18, 2024:

Vendor Certification Acronym
CISCO CCNA
CISCO CBROPS
CISCO CCNP Security
CompTIA A+
CompTIA Cloud+
CompTIA Security+
CompTIA SecurityX
CompTIA Network+
CompTIA CySA+
CompTIA PenTest+
EC-Council CCISO
EC-Council CND
EC-Council CEH
EC-Council CHFI
FITSI FITSP-D
FITSI FITSP-O
FITSI FITSP-M
FITSI FITSP-A
GIAC GSEC
GIAC GDSA
GIAC GCIA
GIAC GCSA
GIAC GCLD
GIAC GICSP
GIAC GFACT
GIAC GCED
GIAC GCIH
GIAC GISF
GIAC GSLC
GIAC GCFA
GIAC GPEN
GIAC GCTI
GIAC GCFE
GIAC GSNA
ISACA CISA
ISACA CISM
ISC2 SSCP
ISC2 CISSP
ISC2 CCSP
ISC2 CSSLP
ISC2 CISSP-ISSAP
ISC2 CISSP-ISSEP
ISC2 CGRC/CAP
ISC2 CISSP-ISSMP
Mile2 CISSO
Mile2 CPTE
Rocheston LLC CCE
CertNexus CFR
CertNexus CSC

When Does DoD 8140 Take Effect?

By February 2025, all DoD civilian employees and military service members in DCWF work roles under the cybersecurity workforce element must be qualified in accordance with DoDM 8140.03.