What is DoD Directive 8570.1?
DoD Directive 8570.01 provides the basis for an enterprise-wide solution to train, qualify, and manage the DoD Information Assurance (IA) workforce. The policy requires Information Assurance technicians and managers to be trained and qualified to a DoD-approved baseline requirement. The Directive's accompanying manual identifies the specific individual qualifications mandated by the Directive's enterprise-wide IA workforce management program. Much of the Directive addresses workforce management issues. Components must:
The ultimate vision of the Directive is a sustained, professional IA workforce with the knowledge and skills to effectively prevent and respond to attacks against DoD information, information systems, and information systems infrastructures. This effort will enable DoD to put the right people with the right skills in the right position to protect DoD information systems.
Under the DoD 8570.1, who needs to be certified?
Information Assurance Technical (IAT) and IA Management (IAM) personnel must be fully qualified to baseline requirements to perform their IA duties.
The policy defines IAT workforce members as anyone with privileged access to information system and performing IA functions.
IAM personnel are responsible for the management of information security/IA requirements for DoD operational systems and perform the IA functions described in the DoD 8570.01-M.
The qualification and workforce management requirements of DoD 8570.01-M apply to all members of the DoD IA workforce including military, civilians, local nationals, Non-Appropriated Fund (NAF) personnel, and contractors. The requirements apply whether the duties are performed full-time, part-time, or as an embedded duty.
Certification requirements also exist for members of the workforce who perform system design functions such as System Architecture and Engineering (IASAE) and Computer Network Defense (CND) Service Providers. See Chapters 10 and 11 of the manual (http://www.dtic.mil/whs/directives/corres/pdf/857001m.pdf) for more information on these positions and their requirements.
Who pays for the certifications?
Starting in FY12, DoD Components must individually budget and pay for DoD military and civilian IA Workforce members' required certifications as well as include IA WIP sustainment requirements (such as continuing education and annual maintenance fees) in their budget plans. The Government cannot pay for contractor certifications or certification preparation training.
How long do I have to become certified?
There is a six-month limit for obtaining an IA Baseline Certification for all Service personnel, Government civilians, local nationals, and Non-Appropriated Fund employees. Contractors should have the appropriate IA Baseline Certification when entering the contract.
What can I do now to prepare for certification requirements?
Information Assurance Technical (IAT) and IA Management (IAM) personnel are strongly encouraged to complete DoD training available internally (e.g., Service Schoolhouse IA courses, DISA web based training) or external training currently supported by your Component for courses with learning objectives directly aligned to the IA baseline certifications outlined in the Manual. Contact your IAM or Component's IA Workforce OPR POC for more information
Do I have to take the training associated with a certification, or can I just take the test?
Under DoD Directive 8570.01 and as specified in DoD 8570.01-M, you are not required to take specific training to prepare for the certification test. However, you should be able to demonstrate the ability to pass the test (e.g., take and pass a "pre-test" or assessment exam). Your IAM should verify that you are prepared to take the certification exam before authorizing you to request an exam voucher.
What is the DWCA?
DWCA stands for Defense Workforce Certification Application. This is the authoritative database of DoD Military, Civilian and Contractor personnel who hold active 8570 certifications used by the DoD CIO office to validate, monitor and report on the certification status of certified IA workforce members.
IA members who currently hold an 8570.01-M approved certification should access the DWCA website and register their certification by entering their name and certification information and authorizing its release to the certification provider of their certification for verification. Once the information has been submitted by a certified individual, an email will be sent to the certification provider asking them to verify certification status. Once the certification provider verifies the certification status with their company the certified individual will show up as “validated” in the DWCA system and to the DoD CIO office.
For military and civilian personnel, registering your certification(s) in the DWCA will also ensure that any maintenance fees associated with the certification can be paid for by the DoD (until 2011). Because the DWCA is the only authoritative database for the certification status of IA professionals, only those individuals who are correctly registered in it will have their annual maintenance fees paid for.
Once I become certified, what do I do?
Register and release all your certifications in the Defense Workforce Certification Application (DWCA). This is the authoritative database for all DoD Military, Civilian and Contractor personnel who hold active DoD 8570.01-M certifications. By releasing your certification(s) in the DWCA you ensure that the DoD is aware of your certification status and that the information can be validated by the certification providers (e.g. ISC2, GIAC, ISACA, CompTIA).
In addition to registering your certification in the DWCA, you should also notify your Component's IA Workforce personnel point of contact to make certain that your certification status is properly documented in all your Component's personnel databases of record. The DoD 8570 Manual also requires IATs to obtain a local operating system or computing environment certification or certificate in addition to the baseline requirements. Your Component POC should be able to assist you in identifying and meeting any additional requirements of your Component.
You will need to maintain your certification status by completing continuous learning requirements as defined by your respective certification provider (e.g., ISC2, ISACA, CompTIA, etc.). You are encouraged to monitor current certification provider activity to see if they have imposed additional continuous learning requirements.
I already hold a certification listed in DoD 8570.01-M, what more will I need to do?
Register and release your certifications in the Defense Workforce Certification Application. This is the authoritative database of all DoD Military, Civilian and Contractor personnel who hold active DoD 8570.01-M certifications. By releasing your certification(s) in the DWCA, you ensure that the DoD is aware of your certification status and that the information can be validated by the certification providers (e.g. ISC2, GIAC, ISACA, CompTIA).
In addition to registering your certification in the DWCA, you should also notify your Component's IA Workforce personnel point of contact to make certain that your certification status is properly documented in all your Component's personnel databases of record. The Manual also requires IATs to obtain a local operating system or computing environment certification or certificate in addition to the baseline requirements. Your Component POC should be able to assist you in identifying and meeting any additional requirements of your Component.
You will need to maintain your certification status by completing continuous learning requirements as defined by your respective certification provider (e.g., ISC2, ISACA, CompTIA, etc.). You are encouraged to monitor current certification provider activity to see if they have imposed additional continuous learning requirements.
How do my annual maintenance fees get paid?What qualifies as “continuous learning”?
Continuing education requirements and acceptable continuous learning activities vary based on certification provider. Certification providers determine the specific training and other activities that qualify for continuous learning credit. Contact your certification provider to find out more exact details on their continuous learning program.
I want more information, who can contact?
Contact an ONLC Education Advisor weekdays via chat or our toll free number below for assistance and see the list of approved training classes at ONLC that are DoD 8570 / 8140 Approved Baseline Certifications.
ONLC can help your agency personnel meet Directive 8570 /8140 training requirements and assist agency personnel achieve both IT certifications and compliance with regulations
For
More Information
To register by phone or for more information about DoD Directive 8570 and related training classes call ONLC's Education Advisors...
1.800.288.8221