DoD Directive 8570 (DoDD 8570)

DoDD 8570 provides procedures and guidelines for the training, certification and management of all DoD employees with IA roles, as well as reporting metrics. The Directive only affects personnel or agencies with privileged access to DoD information systems.

DoDD 8570 requirements are as follows:

• Certification of all personnel handling Information Assurance Management (IAM) and Information Assurance Technical (IAT) duties by the end of 2010.
• Certification of all personnel handling Computer Network Defense Service Provider (CND-SP) and Information Assurance System Architect and Engineer (IASAE) duties by the end of 2011.
• Categorization of all IA positions as Technical Level (I, II, III) or Management. Personnel must be certified to qualify.