SECURE Washington, DC took place on June 24, 2025. ISC2 SECURE events are trends-focused conferences that gather cybersecurity professionals together to explore and discuss the issues that are most pressing and relevant to the regional audience.
At the event, Patrick Johnson, Director, DoD CIO’s Workforce Innovation Directorate, presented a session titled The Power of the DoD Cyber Workforce Framework and Data Analytics.
In a time of workforce uncertainty across the federal government, Patrick Johnson sees opportunity. In a session on the DoD Cyber Workforce Framework (DCWF), Johnson emphasized how data-driven workforce shaping and skills-based hiring are key to building a mission-ready cyber force at speed and scale.
The DoD’s 8140 qualification program, aligned with the NICE framework, defines 74 work roles across seven elements, covering a workforce of more than 175,000 personnel (closer to 225,000 with contractors included). Johnson highlighted the importance of focusing on demonstrated capability over traditional degrees, noting that certifications, like the CISSP, often span multiple roles, offering flexibility and career mobility.
Certifications in DoD 8140
“I am looking at certifications. I'm not necessarily focused on a bachelor's or a master's degree,” Johnson said. “At the end of the day, we’re focused on ‘What is your capability? What can you demonstrate?’ and then trying to bring that in.”
The 2024 ISC2 Workforce Study found that 63% of organizations now prioritize practical skills and certifications over degrees, citing the urgency to fill roles and adapt to evolving threats. The report specifically notes an increasing demand for competency-based assessments and micro-credentials.
The DoD looks at certification providers like ISC2 as partners to bring in professionals who demonstrate capability. For example, ISC2 certifications cover 85% of the approved 54 work roles in the DoD 8140 Cyber Workforce Qualification Provider Marketplace. This is determined through an intense analysis of knowledge, skills and abilities validated by credentials.
With layoffs being seen across the tech space, college graduates who studied computer engineering or cybersecurity may be facing a challenge in finding their first role. The DoD is an alternate path to the private sector when it comes to building a career.
The DoD has a different hiring approach than many companies in the private sector. While a company may hire for a role, with emphasis on future potential to grow at that organization, the DoD hires for an individual, specific role. If someone then wants to step into another role, the process begins again with applying and proving qualifications. This is where looking at the qualifications or skills that provide multiple paths forward can leave you with more options for paths to go forward. The CISSP meets the requirements for 24 job roles across five of the seven workforce elements.
AI in the DoD Cyber Workforce Framework
With AI reshaping the landscape, Johnson urged leaders to view it as both a transformative and disruptive force. While compliance-heavy roles may be at risk, creative and problem-solving roles stand to benefit. The DoD is actively training its workforce to leverage AI for smarter, faster decision-making.
Johnson also addressed the impact of recent federal workforce reductions, stressing the importance of using data to identify gaps, upskill remaining talent and maintain operational readiness. “Even within a storm, there’s opportunity – if you’re prepared – to capitalize on it,” he said.
By combining the DCWF with advanced analytics, the DoD is not just reacting to change, it’s shaping the future of its cyber workforce.
To watch this session, and exclusive content from SECURE Washington DC, purchase the Best of Bundle. Priced at $79 for members ($99 for non-ISC2 members), you’ll earn 6.75 CPE credits for viewing.