
Everything You Need to Know About the DoD 8140 Directive
Looking for an at-a-glance breakdown of the DoD 8140 Directive? This comprehensive guide provides a clear and concise overview. From key points and work role mapping to compliance timelines and practical implications, the guide is packed with the essential details to help you understand and apply the directive.
Mapped. Approved. Mission-Ready.
Learn more about DoD 8140 through a series of short videos covering key topics, along with a full interview featuring Matt Isnor, Program Lead for Cyberspace Workforce Development in the DoD CIO Office and one of the principal architects of the 8140 program.
How to Become 8140 Compliant
Learn what it takes to meet DoD 8140 requirements, including qualification pathways, role alignment, and timelines for both service members and contractors.
What is DoD8140
Explore the purpose and scope of DoD 8140, how it replaces legacy frameworks, and what it means for managing and validating cyber roles across the Department of Defense.
Benefits for Security Leaders
See how DoD 8140 helps leaders align talent to mission needs, improve readiness, and create a more standardized, accountable cyber workforce.
Benefits for Individuals
Understand how DoD 8140 clarifies career paths, validates skills, and helps individuals navigate training and qualification expectations across cyber roles.
Workforce Development and Retention Tips
Discover how DoD 8140 supports long-term workforce planning by enabling better hiring decisions, targeted development, and stronger retention of cyber talent.
What to Expect from the DoD 8140 Directive Guide
Implemented in 2023, the DoD 8140 establishes a comprehensive, unified framework for developing a resilient and capable cybersecurity workforce. To address expanding requirements, the DoD has standardized cybersecurity training, certifications, and education processes to ensure the affected job roles are well-equipped and confidently prepared.
What’s Inside?
- Who is affected by Dod 8140?
- What are the DoD 8140 requirements?
- Approved certification and training
- Work role mapping to certifications
- Timeline and key dates

Who is Affected by DoD 8140
All DoD personnel assigned to positions requiring the performance of cyberspace work, in accordance with the DoD Cyberspace Workforce Framework (DCWF). This includes Service members, DoD civilian employees (including non-appropriated fund employees), personnel who provide contracted services (referred to in this issuance as "contractors"), and foreign nationals.
- Office of the Secretary of Defense
- Military Departments
- Chairman of the Joint Chiefs of Staff
- Combatant Commands
- Office of the Inspector General of the DoD
- US Coast Guard
- Defense Agencies
- DoD Field Activities
- All other organizational entities in the DoD

Approved GIAC Certifications and Corresponding Affiliate Training
8140 Framework Categories
The 8140 Framework Categories are a high-level grouping of common cybersecurity functions. Select a category below to help you identify the right certifications and affiliate training for your current or desired cybersecurity role.

Cyber IT
Personnel who design, build, configure, operate, and maintain IT, networks, and capabilities. This includes actions to prioritize implement, evaluate, and dispose of IT as well as information resource management; and the management, storage, transmission, and display of data and information.

Cybersecurity
Personnel who secure, defend, and preserve data, networks, net-centric capabilities, and other designated systems by ensuring appropriate security controls and measures are in place, and taking internal defense actions. This includes access to system controls, monitoring, administration, and integration of cybersecurity into all aspects of engineering and acquisition of cyberspace capabilities.

Cyber Enablers
Personnel who perform work roles to support or facilitate the functions of cyber IT, cybersecurity, cyberspace effects, or intelligence workforce (cyberspace) work roles. This includes actions to support acquisition, training and leadership activities.



