Cyber Workforce

The DoD Cyber Workforce Framework (DCWF)

Cyberspace is a warfighting domain that continues to evolve in terms of threat and complexity. As a result, the cyber workforce must also evolve to address the challenges posed by our adversaries and meet strategic mission requirements. A part of this requires reshaping our understanding of the cyber workforce to include all personnel who build, secure, operate, defend, and protect United States cyber resources; conduct cyber-related intelligence activities; and enable current and future cyber operations.

The DCWF describes the work performed by the full spectrum of the cyber workforce as defined in DoD Directive (DoDD) 8140.01. The DCWF leverages the original National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NCWF) and the DoD Joint Cyberspace Training and Certification Standards (JCT&CS). It has a hierarchical structure with seven broad categories, 33 specialty areas, and 54 work roles. Each work role contains a definition, as well as a representative list of tasks and knowledge, skills and abilities (KSAs) describing what is needed to execute key functions. Work roles vary in terms of breadth (requirements spanning multiple sets of functions) and depth (requirements focused on a related set of functions).

The DCWF will facilitate uniform identification, tracking, and reporting required by the Federal Cybersecurity Workforce Assessment Act (FCWAA) of 2015. It will also be used to develop qualification requirements for cyber work roles that will be outlined in DoD Manual(s) 8140.XX. Finally, the DCWF can also be used to support a number of other DoD-wide workforce management and planning activities. For example, it can be used facilitate supply and demand analyses, develop targeted recruitment and retention strategies, develop horizontal and vertical career paths, and standardize development of civilian position descriptions. As such, the DCWF serves as an important building block for a capable and ready cyber workforce.