What is DoDD 8140 (DoDD 8570)?
Department of Defense Directive 8570 has been replaced by the DoD CIO as DoDD 8140; DoDD 8570 is now a part of a larger initiative that falls under the guidelines of DoDD 8140. DoDD 8140 provides guidance and procedures for the training, certification, and management of all government employees who conduct Information Assurance functions in assigned duty positions. These individuals are required to carry an approved certification for their particular job classification.
DoD Approved 8140 (DoDD 8570) Baseline Certifications
| IA Technical | ||||
| IAT Level I | IAT Level II | IAT Level III | ||
| A+ CE CCNA-Security CND Network+ CE | CCNA-Security CySA+ CND Security+ CE | CASP CE CCNP CISA CISSP (or Associate) |
||
| IA Management | ||||
| IAM Level I | IAM Level II | IAM Level III | ||
| CGRC CND Cloud+ Security+ CE | CGRC CASP CISM CISSP (or Associate) CCISO | CISM CISSP (or Associate) CCISO |
||
| IA System Architecture and Engineering | ||||
| IASAE Level I | IASAE Level II | IASAE Level III | ||
| CASP CE CISSP (or Associate) CSSLP | CASP CE CISSP (or Associate) CSSLP | CISSP-ISSAP CISSP-ISSEP |
||
| Cyber Security Service Provider | ||||
| CSSP Analyst | CSSP Infrastructure Support | CSSP Incident Responder | CSSP Auditor | CSSP Manager |
| CEH CFR CySA+ | CEH CySA+ CND CHFI Cloud+ | CEH CFR CHFI Cloud+ | CEH CySA+ CISA Cloud+ CHFI | CISM CCISO |
Who is Affected by DoDD 8140 (DoDD 8570)?
Any full or part-time military service member, contractor, or local nationals with privileged access to a DoD information system performing information assurance (security) functions — regardless of job or occupational series.
- Office of the Secretary of Defense
- Military Departments
- Chairman of the Joint Chiefs of Staff
- Combatant Commands
- Office of the Inspector General of the DoD
- Defense Agencies
- DoD Field Activities
- All other organizational entities in the DoD
DoDD 8140 (DoDD 8570)Requires:
- All personnel performing IAT and IAM functions must be certified.
- All personnel performing CSSP and IASAE roles must be certified.
- All IA jobs will be categorized as ‘Technical’ or ‘Management’ Level I, II, or III, and to be qualified for those jobs, you must be certified
