Yes: ISACA's CISA and CISM are approved DoD 8140 qualifications. ISACA announced the approval on 21 May 2024. CISM is a foundational qualification option for work role 722, Information Systems Security Manager, at the Intermediate and Advanced levels; CISA is an option for work role 612, Security Control Assessor, at the Intermediate and Advanced levels.
Work roles that accept CISA or CISM
Under DoD Manual 8140.03, every cyber position is coded to a DoD Cyber Workforce Framework (DCWF) work role and a proficiency level: Basic, Intermediate or Advanced. The DoD 8140 qualification matrices list the certifications, training and education that meet each one. An option listed at a higher level also counts at the lower levels of the same role.
| DCWF work role | CISA | CISM |
|---|---|---|
| 722 Information Systems Security Manager | — | IntermediateAdvanced |
| 723 COMSEC Manager | — | IntermediateAdvanced |
| 612 Security Control Assessor | IntermediateAdvanced | Advanced |
| 611 Authorizing Official / Designating Representative | — | Advanced |
| 541 Vulnerability Assessment Analyst | — | Advanced |
| 652 Security Architect | — | Advanced |
| 801 Program Manager | — | Advanced |
| 804 IT Investment / Portfolio Manager | — | Advanced |
A certification is one of several ways to meet the foundational qualification; DoD components can add their own requirements, and the position description decides the work role and level. Your contract and your prime decide what applies to contractor staff.
How VIS gets a team qualified
- MapWorkforce Readiness Assessment: each person, work role and level.
- TrainCISA for 612, CISM for 722, as public seats or a private cohort.
- ProveCertificates, completion records and CPE tracking in one evidence pack.
- BidBid Staffing Readiness Review: staff qualify on day one.
Sources
- ISACA press release, 21 May 2024: CISA and CISM recognized as approved qualifications for the DoD cyber workforce
- DoD Cyber Exchange: DoD 8140 qualification matrices (Matrix v2.1, effective 19 September 2025)
- DoD 8140 Matrix v2.1 notes: options at a higher proficiency level also align to the lower levels
Courses for these roles
- 612
- CISA training
- 722
- CISM training
- Dates
- Cohort schedule
- Price
- $1,199 a seat, or $1,749 with the exam voucher
- If you fail
- Pass Assurance
More on the program: Defense Cyber Workforce Readiness.
DoD 8140 Questions
Is CISM approved for DoD 8140?
Yes. CISM is a DoD 8140 foundational qualification option for work role 722, Information Systems Security Manager, and 723, COMSEC Manager, at the Intermediate and Advanced levels, and for several other work roles at the Advanced level, including 612, Security Control Assessor.
Which DCWF work roles accept CISA?
CISA is a DoD 8140 foundational qualification option for work role 612, Security Control Assessor, at the Intermediate and Advanced proficiency levels.
Do defense contractors need DoD 8140 qualification?
When a contract or its performance work statement requires DoD 8140 qualification, contractor staff in coded cyber positions need a qualification that matches their work role and proficiency level. Your contract and your prime decide what applies.
Does an Advanced-level qualification also count at Intermediate?
Yes. The DoD 8140 matrix notes say an option aligned to a higher proficiency level also aligns to the lower levels of the same work role.