Welcome to ONLC Training Centers


FAQsFrequently Asked Questions / FAQs:
Department of Defense (DoD) Directive 8570.1



What is DoD Directive 8570.1?

DoD Directive 8570.01 provides the basis for an enterprise-wide solution to train, qualify, and manage the DoD Information Assurance (IA) workforce. The policy requires Information Assurance technicians and managers to be trained and qualified to a DoD-approved baseline requirement. The Directive's accompanying manual identifies the specific individual qualifications mandated by the Directive's enterprise-wide IA workforce management program. Much of the Directive addresses workforce management issues. Components must:

  • Identify and document IA positions in manpower databases
  • Identify and assign qualified personnel in those positions

The ultimate vision of the Directive is a sustained, professional IA workforce with the knowledge and skills to effectively prevent and respond to attacks against DoD information, information systems, and information systems infrastructures. This effort will enable DoD to put the right people with the right skills in the right position to protect DoD information systems.

 

Under the DoD 8570.1, who needs to be certified?

Information Assurance Technical (IAT) and IA Management (IAM) personnel must be fully qualified to baseline requirements to perform their IA duties.

The policy defines IAT workforce members as anyone with privileged access to information system and performing IA functions.

IAM personnel are responsible for the management of information security/IA requirements for DoD operational systems and perform the IA functions described in the DoD 8570.01-M.

The qualification and workforce management requirements of DoD 8570.01-M apply to all members of the DoD IA workforce including military, civilians, local nationals, Non-Appropriated Fund (NAF) personnel, and contractors. The requirements apply whether the duties are performed full-time, part-time, or as an embedded duty.

Certification requirements also exist for members of the workforce who perform system design functions such as System Architecture and Engineering (IASAE) and Computer Network Defense (CND) Service Providers. See Chapters 10 and 11 of the manual (http://www.dtic.mil/whs/directives/corres/pdf/857001m.pdf) for more information on these positions and their requirements.

 

Return to Top

Who pays for the certifications?

Starting in FY12, DoD Components must individually budget and pay for DoD military and civilian IA Workforce members' required certifications as well as include IA WIP sustainment requirements (such as continuing education and annual maintenance fees) in their budget plans. The Government cannot pay for contractor certifications or certification preparation training.

Return to Top

How long do I have to become certified?

There is a six-month limit for obtaining an IA Baseline Certification for all Service personnel, Government civilians, local nationals, and Non-Appropriated Fund employees. Contractors should have the appropriate IA Baseline Certification when entering the contract.

Return to Top

What can I do now to prepare for certification requirements?

Information Assurance Technical (IAT) and IA Management (IAM) personnel are strongly encouraged to complete DoD training available internally (e.g., Service Schoolhouse IA courses, DISA web based training) or external training currently supported by your Component for courses with learning objectives directly aligned to the IA baseline certifications outlined in the Manual. Contact your IAM or Component's IA Workforce OPR POC for more information

 

Do I have to take the training associated with a certification, or can I just take the test?

Under DoD Directive 8570.01 and as specified in DoD 8570.01-M, you are not required to take specific training to prepare for the certification test. However, you should be able to demonstrate the ability to pass the test (e.g., take and pass a "pre-test" or assessment exam). Your IAM should verify that you are prepared to take the certification exam before authorizing you to request an exam voucher.

Return to Top

What is the DWCA?

DWCA stands for Defense Workforce Certification Application. This is the authoritative database of DoD Military, Civilian and Contractor personnel who hold active 8570 certifications used by the DoD CIO office to validate, monitor and report on the certification status of certified IA workforce members.

IA members who currently hold an 8570.01-M approved certification should access the DWCA website and register their certification by entering their name and certification information and authorizing its release to the certification provider of their certification for verification. Once the information has been submitted by a certified individual, an email will be sent to the certification provider asking them to verify certification status. Once the certification provider verifies the certification status with their company the certified individual will show up as “validated” in the DWCA system and to the DoD CIO office.

For military and civilian personnel, registering your certification(s) in the DWCA will also ensure that any maintenance fees associated with the certification can be paid for by the DoD (until 2011). Because the DWCA is the only authoritative database for the certification status of IA professionals, only those individuals who are correctly registered in it will have their annual maintenance fees paid for.

Return to Top

Once I become certified, what do I do?

Register and release all your certifications in the Defense Workforce Certification Application (DWCA). This is the authoritative database for all DoD Military, Civilian and Contractor personnel who hold active DoD 8570.01-M certifications. By releasing your certification(s) in the DWCA you ensure that the DoD is aware of your certification status and that the information can be validated by the certification providers (e.g. ISC2, GIAC, ISACA, CompTIA).

In addition to registering your certification in the DWCA, you should also notify your Component's IA Workforce personnel point of contact to make certain that your certification status is properly documented in all your Component's personnel databases of record. The DoD 8570 Manual also requires IATs to obtain a local operating system or computing environment certification or certificate in addition to the baseline requirements. Your Component POC should be able to assist you in identifying and meeting any additional requirements of your Component.

You will need to maintain your certification status by completing continuous learning requirements as defined by your respective certification provider (e.g., ISC2, ISACA, CompTIA, etc.). You are encouraged to monitor current certification provider activity to see if they have imposed additional continuous learning requirements.

Return to Top

 

I already hold a certification listed in DoD 8570.01-M, what more will I need to do?

Register and release your certifications in the Defense Workforce Certification Application. This is the authoritative database of all DoD Military, Civilian and Contractor personnel who hold active DoD 8570.01-M certifications. By releasing your certification(s) in the DWCA, you ensure that the DoD is aware of your certification status and that the information can be validated by the certification providers (e.g. ISC2, GIAC, ISACA, CompTIA).

In addition to registering your certification in the DWCA, you should also notify your Component's IA Workforce personnel point of contact to make certain that your certification status is properly documented in all your Component's personnel databases of record. The Manual also requires IATs to obtain a local operating system or computing environment certification or certificate in addition to the baseline requirements. Your Component POC should be able to assist you in identifying and meeting any additional requirements of your Component.

You will need to maintain your certification status by completing continuous learning requirements as defined by your respective certification provider (e.g., ISC2, ISACA, CompTIA, etc.). You are encouraged to monitor current certification provider activity to see if they have imposed additional continuous learning requirements.

Return to Top

How do my annual maintenance fees get paid?

Since January 2011, your DoD Component has been responsible for paying your AMF. Contact your IAM or Component Office of Primary Responsible for executing the DoD 8570.01-M.

Return to Top

If I fail a certification can I retake the exam?

Yes. The 8570.01 and 8570.01-M do not set a limit on the number of times a person may attempt to qualify for certification. Components must support at least one retest attempt, but may enforce a limit on the number of additional retests they will fund. If the individual's Component has set a limit on the number of retest attempts, an individual may take a subsequent test at their own expense. If they qualify for certification, then they would qualify to fill an IAT or IAM position (assuming they meet the other requirements such as background investigation, OJT, etc.). Remember, after CY 2010 a DoD military or civilian employee that has not completed the requirements and certifications outlined in the DoD 8570.01-M Manual is not authorized to fill an IAT or IAM billet (2011 for IASAE or CND SP).

Return to Top

Can DoD use appropriated funds for military or civilian personnel to take commercial certification exams?

Yes. Chapter 101 of Title 10, United States Code has been amended to permit Services to use appropriated funds to pay for commercial certifications (tests) for uniformed personnel. The FY06 DoD Appropriations Bill gives uniformed personnel parity with civilians.

Return to Top

What qualifies as “continuous learning”?

Continuing education requirements and acceptable continuous learning activities vary based on certification provider. Certification providers determine the specific training and other activities that qualify for continuous learning credit. Contact your certification provider to find out more exact details on their continuous learning program.

Return to Top

I want more information, who can contact?

Contact an ONLC Education Advisor weekdays via chat or our toll free number below for assistance and see the list of approved training classes at ONLC that are DoD 8570 / 8140 Approved Baseline Certifications.

Return to Top

 

ONLC can help your agency personnel meet Directive 8570 /8140 training requirements and assist agency personnel achieve both IT certifications and compliance with regulations

For More Information
To register by phone or for more information about DoD Directive 8570 and related training classes call ONLC's Education Advisors...

1.800.288.8221

 

ONLC TRAINING CENTERS
800-288-8221
www.onlc.com