Skip to content
8140 Compliance
CertificationsWork rolesMapperTimelineFor teams

8570 → 8140 transition

From IAT/IAM levels to DCWF work roles

DoD 8570.01-M was replaced by the DoD 8140 policy series. The old IAT, IAM, and IASAE baseline levels gave way to qualification by DCWF work role and proficiency — but the legacy terms are everywhere, so here's what actually changed.

Does my 8570 certification still count under 8140?

Often, yes — but conditionally. DoD states certifications earned under 8570 may carry over to 8140 depending on the work role and proficiency level assigned to your position, provided the certification is current. There is no one-to-one crosswalk between the programs and no blanket grandfathering, and "Good for Life" certifications are not valid under 8140.

  • QUALIFIEDCurrent cert + matches your DCWF role & proficiency → likely carries over.
  • GAPExpired, or your role now needs a different option → you have a gap to close.
  • AT-RISK"Good for Life" or unmaintained → not valid under 8140.
Map my role nowTransition a team

The 8140 policy series

  1. 1
    DoDD 8140.015 October 2020

    Cyberspace Workforce Management

    Directive — establishes the policy and the DCWF.

  2. 2
    DoDI 8140.0221 December 2021

    Identification, Tracking, and Reporting of Cyberspace Workforce Requirements

    Instruction — designates the DCWF as the authoritative reference and sets coding/reporting.

  3. 3
    DoDM 8140.0315 February 2023

    Cyberspace Workforce Qualification and Management Program

    Manual — the qualification program that replaced DoD 8570.01-M.

DoDM 8140.03 cancelled DoD 8570.01-M (originally 19 December 2005).

Reference

The legacy 8570 baseline certification table

What each old functional level accepted, and where that work lands in the DCWF. Provided for transition reference — 8570 is superseded by 8140.

Legacy levelApproved certificationsWhere it maps under 8140
IAT Level IA+ CENetwork+ CESSCPCCNA SecurityCySA+GICSPGSECSecurity+ CECNDEntry technical roles → now DCWF Cyberspace IT / Cybersecurity roles at Basic proficiency.
IAT Level IICCNA SecurityCySA+GICSPGSECSecurity+ CESSCPCNDThe classic 'IAT II' baseline → broadly maps to Basic/Intermediate cybersecurity & IT roles.
IAT Level IIICASP+ CECCNP SecurityCISACISSP (or Associate)GCEDGCIHSenior technical roles → Advanced-proficiency DCWF roles.
IAM Level ICAPGSLCSecurity+ CECNDEntry management → DCWF management roles (e.g., ISSO/ISSM) at lower proficiency.
IAM Level IICAPCASP+ CECISMCISSP (or Associate)GSLCCCISOMid management → DCWF Information Systems Security Manager and related roles.
IAM Level IIICISMCISSP (or Associate)GSLCCCISOSenior management → Advanced-proficiency DCWF management roles.
IASAE I / IICASP+ CECISSP (or Associate)CSSLPArchitect/engineer roles → DCWF architecture & software engineering roles.
IASAE IIICISSP-ISSAPCISSP-ISSEPSenior architect/engineer → Advanced architecture roles.

Legacy baseline data reflects the DoD 8570 Approved Baseline Certifications table. Always confirm current requirements against the DoD 8140 Qualification Matrix and your contract.

Questions

8570 → 8140 transition FAQ

Is DoD 8570 still in effect?
DoD 8570.01-M has been superseded by the DoD 8140 policy series for military and civilian personnel; DoDM 8140.03 cancelled it. The DoD keeps 8570 reference material available for transition, and contractor obligations continue under 8570 until the DFARS is updated to authorize 8140 for contractors — which is why '8570', 'IAT II', and 'IAM' still appear in contracts and job postings.
Is there a crosswalk between 8570 IAT/IAM levels and DCWF work roles?
No. DoD states the two programs are not structured the same and there is no direct crosswalk between 8570 IA functional categories and DCWF work roles. 8570 used broad functional levels (IAT/IAM/IASAE I-III); 8140 qualifies you by specific DCWF work role and proficiency level (Basic/Intermediate/Advanced).
Does my 8570 certification still count under 8140?
It may. DoD says certifications earned under 8570 can carry over to 8140 depending on the work role and proficiency level assigned to your position, provided the certification is current. There is no blanket grandfathering, and 'Good for Life' certifications are not valid under 8140 — credentials must be maintained per the provider's renewal rules.
I'm a contractor still seeing 'IAT Level II' on my contract — what do I do?
That's expected: contractor requirements flow through 8570 until the DFARS incorporates 8140. In practice, the certifications overlap heavily — Security+ remains the common IAT II baseline and a qualifying 8140 option for many roles — so earning it serves both. Confirm your specific contract's requirement with your contracting officer.