# DoD Updates Cyber Workforce Qualifications

The Department of Defense’s 8140 Qualification Matrix Version 2.1 took effect on September 19, 2025. The supplied material does not include the matrix’s certification-to-work-role mapping, so it does not establish which certifications satisfy the Cybersecurity Service Provider (CSSP) Analyst requirement. It also notes that qualification options and DoD-owned training requirements may vary by component. Contractors and workforce managers should use the current matrix and confirm applicable requirements with their organization before making hiring, training, or qualification decisions.

- Do not treat this announcement as confirmation that any specific certification qualifies for the CSSP Analyst role; the relevant mapping is not present in the supplied material.
- Check the CSSP Analyst work-role mapping in Version 2.1 and verify component-specific qualification and training requirements with the relevant organization.
- The listed DAU contact, acquisition.cyber@dau.edu, is for questions or concerns about DAU DCWF learning playlists.

**Jurisdictions:** federal
**Industries:** Defense & Military
**Topics:** Cybersecurity
**Published:** October 08, 2026

### Government Entities
- Department of Defense (DoD)
- DoD Chief Information Officer Workforce Innovation Directorate (DoD CIO WID)
- Defense Acquisition University (DAU)
- Defense Cyber Crime Center (DC3)
- Defense Information Systems Agency (DISA)

### Key Quotes
> Users should consult with a representative from their organization before enrolling in any foundational qualification option to verify current requirements.
> — Original poster

### Sources
- [What certifications currently satisfy the DoD CSSP Analyst requirement?](https://www.reddit.com/r/cybersecurity/comments/1x0t4r4/what_certifications_currently_satisfy_the_dod) - reddit-cybersecurity