D o D C I O

Cyberspace WorkforceJune 2013

Ms. Stephanie L. Keith, CISSP Cyberspace Workforce Initiatives

DoD-CIO, DCIO-CS, DIAP

04/22/2023 2S U P P O RT T H E W A R F I G H T E R

D o D C I O

Agenda DoD’s Cyberspace Workforce

National Initiative for Cybersecurity Education (NICE)

Policy Updates

2

04/22/2023 3S U P P O RT T H E W A R F I G H T E R

D o D C I O

Multiple Collaborative efforts currently underway Assess DoD’s cyberspace missions and associated work roles Define the cyberspace workforce(s) Establish a DoD cyberspace workforce framework Identify qualification requirements Draft Policy

Outcomes expected in Fall 2013

DoD’s Cyberspace Workforce

3

04/22/2023 4S U P P O RT T H E W A R F I G H T E R

D o D C I O

National Initiative for Cybersecurity Education (NICE) Framework Categories

The Framework organizes cybersecurity into seven high-level categories, each comprised of several specialty areas.

4

“…a national campaign to promote cybersecurity awareness and digital literacy from our boardrooms to our classrooms, and to build a digital workforce for the 21st century.”

President Barack Obama, 29 May 2009

04/22/2023 5S U P P O RT T H E W A R F I G H T E R

D o D C I O

NICE Categories (7) & Tasks (31)Security

ProvisionInformation Assurance

ComplianceSoftware

EngineeringEnterprise

ArchitectureTechnology

DemonstrationSystems

Requirements Planning

Test and Evaluation

Systems Development

Operate & Maintain

Data Administration

Info System Security Mgt

Knowledge Mgt

Customer & Tech Support

Network Services

System Administration

Systems Security Analysis

Protect & Defend

Computer Network Defense (CND)

Incident Response

CND Infrastructure

SupportSecurity

Program MgtVulnerability

Assessment & Mgt

Analyze Cyber Threat Analysis

Exploitation Analysis

All-source Analysis Targets

Operate & Collect

Collection Operations

Cyber Operational

PlanningCyber

Operations

Oversight & Development

Legal Advice & Advocacy

Strategic Planning &

PolicyEducation &

Training

Investigate Investigation Digital Forensics

Job

Task/Workrole

Knowledge, Skills, and Abilities (KSA)

Establishing National Standards

Critical Depth Needed to Build This Highly Technical Workforce5

Acquisition &Program/ProjManagement

Acquisition &

Program/ProjManagement

CyberLeadership

04/22/2023 6S U P P O RT T H E W A R F I G H T E R

D o D C I O

CS-T

CS-SAE

CND

Rol

es

Bas

ed

♦ Right Positions♦ Right People♦ Right Qualifications

Notional Future Cyberspace Construct Positions

Apprentice Journeyman Master

CSE FieldCSSE Designer

CS ArchitectSoftware Developer

AuditorAnalyst

Infrastructure SupportIncident Responder

Service Provider ManagerOther CND Roles/Functions

CS-T-A CS-T-J CS-T-M

CS-M-1 CS-M-2 CS-M-3

Qualification

Applies to:• Military• Civilians• Contractors

Senior Leaders

CS/IA-M

6

04/22/2023 7S U P P O RT T H E W A R F I G H T E R

D o D C I O

Cyberspace Personnel Qualification

Qualified IA Professional

Knowledge and Skill

Experience

Background Investigation

OJT Evaluation

Certification

Demonstration of Proficiency

ContinuingLearning

A combination of the following:

DoD Certificate(s)

7

04/22/2023 8S U P P O RT T H E W A R F I G H T E R

D o D C I O

DoDD 8140 Cyberspace Workforce Management Policy Update Replaces DoDD 8570 Information Assurance (IA) Training, Certification and Workforce Management

Applicable to cyberspace workforce vice IA workforce

Applicable to military, civilian, and contractor cyberspace workforces

Authorizes an integrated cyberspace workforce governance structure

Establishes structure for the supporting Manuals, and revision to the 8570.01-M, Information Assurance Workforce Improvement Program to capture/integrate

Current workforce construct

NICE framework job skills/functions

CYBERCOM workforce mission area requirements

Cyberspace Workforce Policy

8

04/22/2023 9S U P P O RT T H E W A R F I G H T E R

D o D C I O

Leadership Support, Communication, Coordination

CS WF Policy Committee draft

DirectiveStart 14 Dec11– 15 Dec 2012

March 2013 Informal Staffing

June 2013 SD 106

DoDD 8140August 2012 Initial SD 106

December 2013 Publish DEPSECDEF sign

DoDD 8140 Timeline

January 2013 Comment Adjudication

February 2013 Update Policy

9

04/22/2023 10S U P P O RT T H E W A R F I G H T E R

D o D C I O

DoDD 8140.01 Replaces DoDD 8570.01

vLaw Enforcement/Counter-

IntelligenceManual(LE/CI)

Cyber Operations Manual

CybersecurityManual(s)

Digital forensics for LE/CI (badge-carriers)

Cyber Operations IT/IA/Cybersecurity/Network Operations

Defense Cyber Crime Center (DC3)/DUSD Intel

USD I with CYBERCOM

DCIO w/Components8570.01M revision

Expected Issuances under Directive 8140

10

04/22/2023 11S U P P O RT T H E W A R F I G H T E R

D o D C I O

Leadership Support, Communication, Coordination

CS WF Policy Committee draft

Directive

April 2014 Informal Staffing

March 2014 Initial Draft Completed

July 2013 - Begin Drafting Manual

June 2014 SD 106

Implementation phase for new requirements

CS WF Policy: Sub-committeesDraft Issuances

August 2014 Publish

PSA sign

DoDM 8570 Timeline

11

04/22/2023 12S U P P O RT T H E W A R F I G H T E R

D o D C I O

QUESTIONS?

12

04/22/2023 13S U P P O RT T H E W A R F I G H T E R

D o D C I O

BACK-UP

13

04/22/2023 14S U P P O RT T H E W A R F I G H T E R

D o D C I O

The DoD will maintain a holistic, total workforce management perspective to provide a pipeline of qualified Cyberspace personnel

 

Positions designated to perform cyberspace functions will be identified and documented in manpower systems

 

Civilian, military and contractor personnel assigned to perform cyberspace functions must meet DoD cyberspace qualification standards established in supporting issuances

 

Cyberspace workforce personnel qualifications will be documented in records systems  

Component compliance is an element of mission readiness  

Compliance with this policy will be included in DoD and Component inspection programs 

Nothing herein shall be interpreted to subsume or replace the responsibilities, functions, or authorities of the Heads of the DoD Components or other OSD officials as prescribed by law, assigned in chartering DoD directives, or detailed in other DoD policy issuances

“It is DoD policy that”:

DRAFT DoDD 8140 Cyberspace Workforce Management

14