The manual outlines six goals for accomplishing the directive:

​

1. Develop the DoD cybersecurity workforce to enhance protection and availability of DoD information, information systems and networks

2. Establish baseline technical and management skills for cybersecurity functions across the enterprise

3. Provide war fighters with qualified cybersecurity personnel

4. Implement a formal cybersecurity workforce skills development and sustainment process

5. Verify cybersecurity workforce knowledge and skills through standard IT certification testing

6. Augment and enhance knowledge and skills on a continuous basis through experience and formal education

The manual organizes job roles into four categories:

1. Information Assurance Technical (IAT) – technical positions, such as security administrators

2. Information Assurance Management (IAM) – management positions, such as security managers

3. Information Assurance Security Architecture and Engineering (IASAE) – higher-level positions, such as security engineers and security architects

4. Cyber Security Service Provider (CSSP) – this category includes the specific job roles of cybersecurity analyst, infrastructure support, incident responder, management and auditing

The IAT, IAM and IASAE categories have three skill levels: I, II and III. The CSSP categories do not include skill levels because the positions are very specific. The skill levels vary by job category, but generally increase from beginner to intermediate to advanced.

A DoD 8570.01-m chart of approved certifications is below, but let’s look at the IAT category as an example to better illustrate how the job categories and skill levels come into play:

• Level 1: Computing Environment: At this level, DoD 8570.01-m requires an IT certification such as CompTIA A+ because it focuses on help desk support for the computing environment.

• Level 2: Network and Advanced Computer: DoD 8570.01-m level 2 jobs require an IT certification such as CompTIA Security+ because it focuses on securing networks.

• Level 3: Enclave/Advanced Network and Computer: Level 3 job within DoD 8570.01-m require IT certifications such as CompTIA Advanced Security Practitioner (CASP+) because it covers advanced networking skills.