The DoD 8570.1-M Information Assurance Workforce Improvement Program manual is the compliment manual implementing the policy set forth in DODD 8570.01.
The manual provides guidance for the identification and categorization of positions and certification of personnel conducting Information Assurance (IA) functions within the DoD workforce supporting the DoD Global Information Grid (GIG) per DoD Instruction 8500.2
The objectives for IA workforce improvment is to:
-Develop a DoD IA workforce with a common understanding of the concepts,principles, and applications of IA for each category, level, and function to enhance protection and availability of DoD information, information systems, and networks.
-Establish baseline technical and management IA skills among personnel performing IA functions across the DoD enterprise.
-Provide warfighters qualified IA personnel in each category and level.
-Implement a formal IA workforce skill development and sustainment process,comprised of resident courses, distributive training, blended training, supervised on-the-jobtraining, exercises, and certification/recertification.
-Verify IA workforce knowledge and skills through standard certification testing.
-Augment and expand on a continuous basis the knowledge and skills obtained through experience or formal education.
Two defined IA categories: Information Assurance Management (IAM) Category Non-Technical management/administration of Computing Environment (CE) and Network Environment (NE)
Information Assurance Technical (IAT) Category Technical “hands on” with assigned CE & NE, Level III also focuses on the Enclave level environment. Requires CE certification
IAT category’s functional requirements are cumulative Personnel must demonstrate mastery of lower level duties CE Certification + Security Certification Required
Personnel assigned IAT positions must be issued and retain an appointing letter to their IA duties, COTR maintains for contractors
IAT Level I – 0-4 years experience
IAT Level II – 3-7 years in IA technology or related area
IAT Level III – Main focus on enclave environment and have at least 7+ years of experience Personnel assigned IAM positions must be issued and retain an appointing letter to their IA duties, COTR maintains for contractors
IAM positions that also perform IAT functions must meet both IAT & IAM requirements
All contract, continuing certification, continuing education requirements listed in IAT section are applicable IAM does NOT require CE – Operating System, etc. certifications
IAM Level I – 0-5 years management experience
IAM Level II – At least 5 years management experience
IAM Level III – Usually has at least 10 years of management experience
The chart below represents the certification that fill a particular IA billet. The allowed certifications are to reviewed and updated on a regular basis, however all certifications must meet International Standards Organization/International Electronics Commission (ISO/IEC) 17024 “General Requirements for Bodies Operating Certification of Persons” April 2003