If you are still working to “DoD 8570”, you are working to a cancelled policy. DoD Manual 8140.03 replaced it on 15 February 2023, and qualification now follows a DoD Cyber Workforce Framework work role, not an IAT or IAM level.
Most training pages on this subject — including ours until today — still describe IAT, IAM and IASAE Levels I to III. That structure is gone. If you staff cyber positions under a federal contract, here is what changed and what it means for the certifications you buy.
What replaced DoD 8570?
| Before | Now | |
|---|---|---|
| Policy | DoD 8570.01-M | DoD Manual 8140.03, Cyberspace Workforce Qualification and Management Program |
| Structure | IAT, IAM and IASAE categories with Levels I, II and III | DoD Cyber Workforce Framework (DCWF) work roles, each with up to three proficiency levels – Basic, Intermediate and Advanced |
| Qualified against | A certification list by level | A DCWF work role and its proficiency level |
DoD Manual 8140.03, Cyberspace Workforce Qualification and Management Program was signed on 15 February 2023 and cancels DoD 8570.01-M, the Information Assurance Workforce Improvement Program. Each position maps to a DCWF work role, and each work role carries qualification options at up to three proficiency levels — Basic, Intermediate and Advanced.
Which certification does my work role need?
That answer belongs to the official qualification matrices, and it changes as DoD updates them. We deliberately do not reproduce the list here: a stale copy of a compliance table is worse than no copy, because somebody will buy the wrong course from it.
Is there a deadline?
Yes, and it is the part worth planning around. DoD has set an end date for using experience as a conditional alternative to foundational qualification: 2027 for one workforce element and 2028 for the others. After that, personnel in those elements need a qualifying certification or education option rather than experience alone. Confirm the exact date for your workforce element against the official guidance — but if the plan is “our people have years of experience, so we are fine”, that plan has an expiry date.
What do we teach against it?
The credentials DoD components have historically recognised sit in areas we run constantly: CompTIA (A+, Network+, Security+, CySA+, PenTest+), ISC2 CISSP, ISACA CISM, EC-Council CEH, and the Microsoft and Cisco security tracks. Browse CompTIA, cyber security, Microsoft and Cisco training, or ask us to map a cohort against specific work roles.
How do contractors usually buy this?
Three ways, in the order we see them: a private group class for a team that all need the same qualification; individual seats in our scheduled classes; or a mapped programme built from your position descriptions across several work roles. Government and military buyers get 10% off.
Frequently asked questions
Is DoD 8570 still a requirement?
No. DoD 8570.01-M was cancelled by DoD Manual 8140.03, signed 15 February 2023. Contracts and position descriptions sometimes still say 8570, but the governing policy is 8140.
What replaced the IAT and IAM levels?
DoD Cyber Workforce Framework work roles, each with qualification options at up to three proficiency levels: Basic, Intermediate and Advanced.
Do my existing certifications still count?
That depends on the work role and the current matrix, and we will not guess. Check the official qualification matrices or ask your security manager.
When does qualifying by experience stop being an option?
DoD has set an end date: 2027 for one workforce element and 2028 for the others. Confirm the date for your element against current DoD guidance.
Do you offer private group DoD training in Florida?
Yes. We deliver on site, at our Miami and Fort Lauderdale campuses, or live online, with a 10% government and military discount.
Talk to us about your requirement
Government agencies and military personnel get a 10% discount on our training. Private group delivery is available on your dates, on site, at our Miami and Fort Lauderdale campuses or live online.
Official sources: DoDM 8140.03 · DoD 8140 qualification matrices · DoD Cyber Workforce Framework
Written by The Academy. Last updated October 2026. This page summarises public federal guidance and is not legal or contractual advice — confirm requirements against the official sources above or with your security manager.
