---

FREQUENTLY ASKED QUESTIONS (FAQs)

DoD 8570.01-M

What is DoDI 8570.1-M?

A. Identifies positions and certification of personnel conducting Information Assurance (IA) functions within the DoD workforce.

B. Implements formal IA workforce skill development and sustainment.
NOTE: Certification is no longer "nice-to-have."
Certification is REQUIRED, even where personnel have the skills.

C. Contractors are NOT exempt! 8570 requires all DoD and Contractors to hold specific certifications. To do that you will need to complete the training requirements.
NOTE: this applies to all contracts that include IA services. The test of whether a job contains IA functions is to understand elevated privilege.

D. Identifies multiple overall categories within the IA workforce: Technical, Management, CND and IASE. The categories are also subdivided into three levels each based on functional skill requirements and system environment focus of the position.

E. In addition to the baseline IA certification requirement for their level, Information Assurance Technicians (IATs) with privileged access MUST OBTAIN THE APPROPRIATE COMPUTING ENVIRONMENT (CE) CERTIFICATIONS for the operating system(s) they support. (e.g. appropriate Microsoft, LINUX, CISCO etc…)

F. This means that the requirement is for 100% of identified personnel to achieve certification by 31 December 2010.

G. Contains a recurring requirement to re-certify every 2 years to meet ISO 17024.

What are the benefits of obtaining certification besides the company ability to get continued follow-on work, new work and win customer respect?

1. Certification demonstrates commitment to the profession. Receiving a professional certification shows peers, supervisors and, in turn, the general public - sincere commitment to a chosen career and the ability to perform to established standards. Obtaining certification demonstrates leadership in the computer security field.

2. Certification enhances the profession's image. Certification programs seek to grow, promote, and develop certified professionals who can stand "out in front" as examples of excellence in the industry. This shows customers that certified professionals can do it.

3. Certification reflects personal achievement. As certified professionals we display excellence in the field by fulfilling established standards and requirements.

4. Certification builds self-esteem. Certification programs support standards prescribed by ISC2 SANS, CompTIA and others. This means adherence to the professional performance standards, ethics, and career paths of the security field. Once certified, the professional defines himself/herself beyond a job description or academic degree. Certified professionals control their own professional destiny and develop a deep sense of personal satisfaction.

5. Certification establishes professional credentials. Since it recognizes individual accomplishments, certification distinguishes resumes from others and serves as an objective third-party endorsement to knowledge and experience. It is critical for existing and new business at every company to be able to say to customers: “We can do this.”

6. Certification improves career opportunities and advancement. Certification gives an edge when being considered for a promotion or other career opportunities. Certification clearly identifies the employee who can adapt to changes in work, technology, business practices, and innovation.

7. Certification prepares for greater on-the-job responsibilities. Certification is a voluntary professional commitment to an industry and field of knowledge. It is a clear indicator to employers and customers of the willingness to invest in professional development. Certified professionals are aware of the constantly changing environment around their profession and possess the needed tools to anticipate and respond to change.

8. Certification provides for greater earnings potential. Certified professionals earn more and can expect more in the way of benefits over time. In today's down-sized, right-sized, upside-down working world certifications will give the edge when measured against others.

9. Certification improves skills and knowledge. Certification demonstrates individual competence by confirming proficiency. Taking this step confirms knowledge.

10. Certification offers greater professional recognition from peers. Certified professionals expect increased recognition from peers for taking the extra step in professional development.