Policies & Guidance

Following are links to Cybersecurity policies:

• DoDI 8500.01, Cybersecurity (14 Mar 14)
• DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT) (Change 1, 24 May 16)
• DoDI 8530.01, Cybersecurity Activities Support to DoD Information Network Ops (7 Mar 16)
• DoDI 5000.02, Operation of the Defense Acquisition System (Change 2, 2 Feb 17)
• DoDI 5000.74, Defense Acquisition of Services (5 Jan 16); See Enclosure 7
• DoDD 8140.01, Cyberspace Workforce Management (11 Aug 15)
• Implementation Directive for Better Buying Power 3.0 (9 Apr 15)
• DoD Cybersecurity Policy Chart
• Presidential Policy Directive (PPD) 41 and its Annex on "United States Cyber Incident Coordination" (26 Jul 16)

Other Cybersecurity guidance:

• DoD CIO Cybersecurity Strategy Outline and Guidance (10 Nov 15)
• PM Guidebook for Integrating Cybersecurity RMF into System Acquisition Lifecycle (Sep 2015)
• DoD Cybersecurity Test and Evaluation Guidebook (version 1.0, 1 Jul 15)
• Software Assurance in Acquisition and Contract Language (version 1.2, 18 May 12)

Additional Cybersecurity resources:

• Official DoD website for DoD Issuances (Directives, Instructions, Pubs/Manuals)
• National Security Space Institute (NSSI) Space (and cyber) Weekly News
• Risk Management Framework (RMF) Knowledge Service [CAC Login required]
• Joint Federated Assurance Center (JFAC) [CAC Login required]