NAF Information Technology

The NAF IT Business Mission Area (BMA) will identify common IT and cybersecurity policy vision, goals, desired capabilities, and outcome-measures based on participating (DoD NAFI) input and guidance. The goal of the BMA is to create NAF enterprise-wide representation and advice on NAF IT issues and advocate for DoD NAFIs collectively.

Per DoDI 1015.16, the NAFI IT Working Group is responsible for tracking Military Service and Exchange implementation of DoDI 1015.16 requirements, establishing and defining BMA activities, scope, and responsibilities, and coordinating technology modernization efforts and standards across the DoD NAFI IT Enterprise. The NAF IT WG meets periodically to review and discuss challenges amongst Services and Exchanges and opportunities for cross-Services and Exchanges collaboration.

• DoDI 1015.16 “NONAPPROPRIATED FUND INSTRUMENTALITIES INFORMATION TECHNOLOGY POLICIES AND PROCEDURES Change 1”
• One Page Summary – DoDI 1015.16

DoDI 1015.16 establishes policy, assigns responsibilities, and provides procedures for reciprocal acceptance of authorization decisions and artifacts of DoD NAF Instrumentalities (NAFIs) governed by DoDI 1015.15 for the authorization and connection of NAFI IT. DoDI 1015.16 establishes NAFI IT governance charged with ensuring all relevant parties are aware and informed participants in the maintenance and strategic development of NAF IT cybersecurity.

• DOD AI Policy and Information
• Chief Digital and Artificial Intelligence Office (CDAO) Information
• Policy and Guidance
• AI Risk Toolkits
• DOD CIO AI Focus Group established
• CMMC 2.0 (Only to affect APF Services and Contracts!)
• Business Impact Analysis Template
• DOD Cyber Workforce Framework and DODD 8140.01
• DOD Cloud Access Point Updates and SRG – Need a Waiver?
• Cybersecurity Resource and Reference Guide
• Executive Order on Improving the Nation’s Cybersecurity

DoD CIO Cybersecurity Policy

• DoDI 8500.01, “Cybersecurity”
• DoDI 8510.01, “Risk Management Framework (RMF) for DoD Information Technology (IT)”
• DoDI 8530.01, “Cybersecurity Activities Support to DoD Information Network Operations”
• DoDI 8310.01, “Information Technology Standards in the DoD”
• DoDI 8560.01, “Communications Security (COMSEC) Monitoring”
• DoDI 8582.01, “Security of Non-DoD Information Systems Processing Unclassified Nonpublic DoD Information”
• DoDI 8910.01, “Information Collection and Reporting”

• DoD CIO Home Page
• DoD CIO Library
• Risk Management Framework (RMF) Knowledge Service
• DoD CIO Memo: Continuous Authorization to Operate (cATO)

• RMF and eMASS Training
• College of Information and Cyberspace (NDU)
• National Initiative for Cybersecurity Careers and Studies
• Joint Knowledge Online (JKO)
• DISA Training
• DOD Cyber Crime Center (DC3)
• Defense Acquisition University
• Digital University
• CISA Learning (formerly FedVTE)
• Cyber Exchange
• Microsoft Learn
• Simplilearn
• Tableau
• DOD Civilian Credentialing Opportunities Online (COOL)
• AI – Chat GPT For Beginners
• AI – Basic ChatGPT Guide
• AI – Elementsofai
• AI – Digital AU (DOD and MIT Training)
• AI – MIT (Free training from beginner to expert)
• AI – SimpliLearn (Great video tutorials)
• AI – DAU AI Training and Videos
• AI – DOD AI Policy and Information
• AI – Microsoft and AI
• AI – Google (technical training)
• AI – Coursera
• AI – Linkedin list of AI training