What is DoD 8570?

Department of Defense Directive 8570, or DoDD 8570 provides guidance and procedures for the training, certification, and management of all government employees who perform IA functions in their official assigned duties. These individuals are required to have an approved certification for their specific job classification.

All DOD IA jobs are defined as either ‘Management’ (IAM) or ‘Technical’ (IAT) Level I, II, or III. These levels reflect the system architecture that the employee is in, not the employee’s experience or military rank. This article will guide those who are seeking DoDD IAM level II certification and will examine the requirements, certification, and job positions that demand a DoDD 8570 certification.

To determine whether a position is an IAM or IAT position, you must ask two questions:

  • Does the position require privileged access to a DoD Information System Computing, Network, or Enclave environment?
  • Does the position include any of the functional requirements listed in Chapter 3 of DoD 8570.01-M (Manual) for that level of the information system architecture?

If the answer to both questions is yes, then the position is an IAT position. If the answer is no to both, then it is not an IAT Position. If the answer is yes to the first question and no to the second question, then it is not an IAT position. If the answer is no to the first question and yes to the second question, it may be an IAM or other IA position.

Across the board of IAM and IAT levels, there are different system environments that these positions operate in. These system environments are the Computing Environment (CE), The Networking Environment (NE), and the Enclave. IAM Level II personnel operate within the NE system environment, so it will be the system environment that this article focuses on.

NE, as defined (Read more...)

*** This is a Security Bloggers Network syndicated blog from InfoSec Resources authored by Greg Belding. Read the original post at: