Defense Cyber Workforce Framework (DCWF)

DoD Cyber Workforce Framework (DCWF)

The DoD Cyber Workforce Framework establishes the DoD’s authoritative lexicon based on the work an individual is performing, not their position titles, occupational series, or designator.The DCWF describes the work performed by the full spectrum of the cyber workforce as defined in DoD Directive (DoDD) 8140.01. The DCWF leverages the original National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NCWF) and the DoD Joint Cyberspace Training and Certification Standards (JCT&CS).

The DCWF has a hierarchical structure with categories, specialty areas, and work roles.

Each work role has a definition; a list of core and additional tasks; and knowledge, skills, and abilities (KSAs) that describe what is needed to execute critical functions. The DCWF provides the DoD standard naming and numbering conventions and provides descriptions of individual DoD cyberspace work roles, tasks, and KSAs.

The program is designed to develop a cyberspace workforce with a common understanding of the concepts, principles, and applications of cyberspace functions to enhance interoperability across organizations and mission sets. Cybersecurity knowledge and/or capability requirements must be integrated into the qualification requirements of all cyberspace work roles.

Specifically, the program consists of the foundational qualification areas, residential qualification areas, and Continuous Professional Development (CPD). To achieve qualification, personnel assigned to positions coded to the DCWF must meet both the foundational and resident qualification requirements outlined for each work role at the assigned proficiency levels. Foundational qualifications are met by either education, training, or certifications.

Use the accordion sections detailing the Workforce Elements below to explore work roles and associated core and additional tasks and KSAs.


Click the boxes below to expand/collapse the Workforce Elements and see the associated Work Roles that are in the Talent Marketplace.

Personnel who design, build, configure, operate, and maintain IT, networks, and capabilities. This includes actions to prioritize implement, evaluate, and dispose of IT as well as information resource management; and the management, storage, transmission, and display of data and information. These are the work roles you’ll find in Cyber IT:

Personnel who secure, defend, and preserve data, networks, net-centric capabilities, and other designated systems by ensuring appropriate security controls and measures are in place, and taking internal defense actions. This includes access to system controls, monitoring, administration, and integration of cybersecurity into all aspects of engineering and acquisition of cyberspace capabilities. These are the work roles you’ll find in Cybersecurity:

Personnel who plan, support, and execute cyberspace capabilities where the primary purpose is to externally defend or conduct force projection in or through cyberspace. Work roles you’ll find in Cyberspace Effects:

Personnel who collect, process, analyze, and disseminate information from all sources of intelligence on foreign actors’ cyberspace programs, intentions, capabilities, research and development, and operational activities. Work roles you’ll find Cyberspace Intelligence:

Personnel who perform work roles to support or facilitate the functions of cyber IT, cybersecurity, cyberspace effects, or intelligence workforce (cyberspace) work roles. This includes actions to support acquisition, training and leadership activities. You’ll find work roles in these support functions in Cyberspace Support:

Cyberspace Support Work RolesAcquisition


Legal / Law Enforcement

Training and Education