8570 Implementation

From Govit

The DoD 8570.1-M Information Assurance Workforce Improvement Program manual is the compliment manual implementing the policy set forth in DODD 8570.01.

The manual provides guidance for the identification and categorization of positions and certification of personnel conducting Information Assurance (IA) functions within the DoD workforce supporting the DoD Global Information Grid (GIG) per DoD Instruction 8500.2

The objectives for IA workforce improvment is to:

-Develop a DoD IA workforce with a common understanding of the concepts,principles, and applications of IA for each category, level, and function to enhance protection and availability of DoD information, information systems, and networks.

-Establish baseline technical and management IA skills among personnel performing IA functions across the DoD enterprise.

-Provide warfighters qualified IA personnel in each category and level.

-Implement a formal IA workforce skill development and sustainment process,comprised of resident courses, distributive training, blended training, supervised on-the-jobtraining, exercises, and certification/recertification.

-Verify IA workforce knowledge and skills through standard certification testing.

-Augment and expand on a continuous basis the knowledge and skills obtained through experience or formal education.

IA Categories

Two defined IA categories: Information Assurance Management (IAM) Category Non-Technical management/administration of Computing Environment (CE) and Network Environment (NE)

Information Assurance Technical (IAT) Category Technical “hands on” with assigned CE & NE, Level III also focuses on the Enclave level environment. Requires CE certification

IAT category’s functional requirements are cumulative Personnel must demonstrate mastery of lower level duties CE Certification + Security Certification Required

Personnel assigned IAT positions must be issued and retain an appointing letter to their IA duties, COTR maintains for contractors

IAT Level I – 0-4 years experience

IAT Level II – 3-7 years in IA technology or related area

IAT Level III – Main focus on enclave environment and have at least 7+ years of experience Personnel assigned IAM positions must be issued and retain an appointing letter to their IA duties, COTR maintains for contractors

IAM positions that also perform IAT functions must meet both IAT & IAM requirements

All contract, continuing certification, continuing education requirements listed in IAT section are applicable IAM does NOT require CE – Operating System, etc. certifications

IAM Level I – 0-5 years management experience

IAM Level II – At least 5 years management experience

IAM Level III – Usually has at least 10 years of management experience

IA Certifications

The chart below represents the certification that fill a particular IA billet. The allowed certifications are to reviewed and updated on a regular basis, however all certifications must meet International Standards Organization/International Electronics Commission (ISO/IEC) 17024 “General Requirements for Bodies Operating Certification of Persons” April 2003