Library

• DoD CIO Charter

New Items

• Zero Trust PfMO Newsletter - Nov2024
• DoD Enterprise DevSecOps Fundamentals
• ATO 101 for Small Businesses
• DoD Cloud FinOps Strategy

Business Case Analysis (BCA)

• DoD IT Business Case Analysis Template
• Use of Enterprise IT Standard BCA, DoD CIO Memo w/ Attachment

Cyber Workforce

• Cyber Apprenticeship Memo
• Cyber Workforce Strategy Implementation Plan
• DoDD 8140.01 - Cyberspace Workforce Management
• DoDI 8140.02 - Identification, Tracking, and Reporting of Cyberspace Workforce Requirements
• DoDM 8140.03 - Cyberspace Workforce Qualification & Management Program

Cybersecurity in the Adaptive Acquisition Framework

• Acquisition of Services Pathway Integration with the RMF
• Defense Business Systems Pathway Integration with RMF
• Major Capability Acquisition Pathway Integration with RMF
• Middle Tier of Acquisition Pathway Integration with RMF
• Software Acquisition Pathway Integration with RMF
• Transitioning from the Urgent Capability Acquisition Pathway to another Pathway Program of Record
• Urgent Capability Acquisition Pathway Integration with RMF

Defend Against Cyber Attacks

• ATO 101 for Small Businesses
• Cybersecurity Reciprocity Playbook
• DoD CISO Special Session Town Hall (Feb 2022)
• DoD Cybersecurity Activities Performed for Cloud Service Offerings
• DoD Cybersecurity Reference Architecture
• DoDI 5205.13, Defense Industrial Base (DIB) Cybersecurity (CS) Activities
• DoDI 8310.01, Information Technology Standards in the DoD
• DoDI 8500.01, Cybersecurity
• DoDI 8510.01, Risk Management Framework (RMF) for DoD Systems
• DoDI 8530.01-M, DoD Computer Network Defense Service Provider Certification and Accreditation
• DoDI 8540.01, Cross Domain (CD) Policy
• DoDI 8582.01, Security of Non-DoD Info Sys. Processing Unclass Non-Public DoD Information
• Memo: Continuous Authorization To Operate (cATO)
• Memo: FEDRAMP Equivalency for Cloud Service Providers
• Memo: Reciprocity
• Standards Guide for Foreign Partners
• Zero Trust Capabilities and Activities
• Zero Trust Capability Execution Roadmap
• Zero Trust Overlays
• Zero Trust PfMO Newsletter - Nov2024
• Zero Trust Strategy Placemats

Digital Capabilities Acquisition Guidance

• Requirements for the Acquisition of Digital Capabilities Guidebook

DoD CIO and DoD CISO Policy memos

• DoD CIO milSuite Group Homepage (CAC required)

Efficiently Using Cloud

• Cloud Access
  • DoD Cloud Native Access Point (CNAP) Reference Design (RD)
  • Memo - DoD JWCC & Next Steps to Rationalize Cloud Use Across the DoD
• FinOps
  • DoD Cloud FinOps Strategy

Empower Mobile Data Access

• DoDI 8100.02, Use of Commercial Wireless Devices, Services, and Technologies in the Department of Defense
• DoDI 8420.01, Commercial Wireless Local-Area Network (WLAN) Devices, Systems, and Technologies
• DoD Unclassified Wireless Mobile Services and Devices Spiral 4
• Memo: Use of Non-Government Owned Mobile Devices
• Memo: Use of Text Messages on Mobile Devices and RM
• Memo: Use of Unclassified Mobile Applications in the DoD
• Securing Your Home Network
• Telework Do's & Don'ts

Identity, Credential, and Access Management (ICAM)

• DoD CIO ICAM Placemat
• DoD CIO Memorandum: DoD Mobile Public Key Infrastructure (PKI) Credentials
• DoD Enterprise Identity, Credential, and Access Management (ICAM) Reference Design
• DoDI 8520.02, Public Key Infrastructure (PKI) and Public Key (PK) Enabling
• DoDI 8520.03, Identity Authentication for Information Systems
• Identity, Credential, and Access Management (ICAM) Strategy
• Modernizing the Common Access Card - Streamlining Identity and Improving Operational Interoperability

Maximize Spectrum Access to Enhance Operational Effectiveness

• 2020 DoD EMS Superiority Strategy
• DoD Principles on Mission Effectiveness and Spectrum Efficiency with attachment
• DoD Emerging Mid-Band Radar Spectrum Sharing (EMBRSS) Feasibility Assessment Report (Redacted)
• DoDI 3222.03 Electromagnetic Environmental Effects (E3) Program
• DoDI 4650.01, Policy and Procedures for Management and Use of the Electromagnetic Spectrum
• DoDI 8320.05, Electromagnetic Sharing Data
• Enterprise Satellite Communications Management and Control Implementation Plan

Modern Software Practices

• DoD Software Modernization Strategy
• DoD Software Modernization Implementation Plan Summary for FY23-24
• DevSecOps Document Set
  • DoD Enterprise DevSecOps Fundamentals
  • DevSecOps Fundamentals Guidebook: Activities & Tools
  • DevSecOps Fundamentals Guidebook: Activities & Tools (xlsx)
  • DevSecOps Playbook
• DevSecOps Reference Designs
  • DoD Enterprise DevSecOps Reference Design: CNCF Kubernetes
  • DoD Enterprise DevSecOps Reference Design: CNCF Multi-Cluster Kubernetes
  • DRAFT: DOD AWS Managed Service
  • DRAFT: DOD Cloud IaC + GitHub + Azure
  • Pathway to Reference Design
• Open Source Software
  • Software Development and Open Source Software Memorandum
• Continuous Authority to Operate
  • Memo: Continuous Authorization to Operate (cATO)
  • DevSecOps Continuous Authorization to Operate (cATO) Evaluation Criteria
  • DevSecOps Continuous Authorization Implementation Guide

Modernize the Networks

• DoDI 5000.82, Acquisition of Information Technology (IT)
• DoDD 8000.01, Management of the Department of Defense Information Enterprise
• DoDI 8010.01, Department of Defense Information Network (DODIN) Transport
• DoDI 8330.01, Interoperability of Information Technology (IT), Including National Security Systems
• DoDI 8410.01, Internet Domain Name and Internet Protocol Address Space Use and Approval 
• DoDI 8551.01, Ports, Protocols, and Services Management (PPSM)

Share with Mission Partners

• DoDI 8110.01, Mission Partner Environment (MPE) Information Sharing Capability Implementation
• DoDI 8170.01, Online Information Management and Electronic Messaging