Frequently Asked Questions

What is DoD Directive 8570.1?

DoD Directive 8570.1 provides the basis for an enterprise-wide solution to train, certify, and manage the DoD Information Assurance (IA) workforce. The policy requires Information Assurance technicians and managers to be trained and certified to a DoD baseline requirement. The Directive's accompanying Manual, currently in formal coordination, identifies the specific certifications mandated by the Directive's enterprise-wide certification program.

Much of the Directive addresses workforce management issues. Components must identify and document in personnel and manpower databases, IA personnel and positions and make certain that IA personnel meet training and certification requirements related to their job functions. The ultimate vision of the Directive is a sustained, professional IA workforce with the knowledge and skills to effectively prevent and respond to attacks against DoD information, information systems, and information infrastructures. This effort will enable DoD to put the right people with the right skills in the right place.

Do I need any special training on how to implement DoD 8570.1? (I have received e-mails from commercial activities stating that I must attend a mandatory training session on implementing DoD 8570.1)

No. Neither you, nor your organization needs special training regarding the implementation of DoD 8570. Furthermore, the DoD has not sponsored or required any commercial 8570.1 implementation training or planning sessions. You should disregard any direct messages from vendors indicating a requirement to complete their course or information session as part of DoD 8570.1 implementation.

Who needs to be certified?

Personnel that are placed in the category or specialty of Information Assurance Technical (IAT),  IA Management (IAM), Computer Network Defense Service Providers (CND-SPs) and IA Systems Architects and Engineers (IASAEs)  must be fully trained and certified to baseline requirements to perform their IA duties. The training, certification, and workforce management requirements of 8570.1 apply to all members of the DoD IA workforce including military, civilians, foreign nationals, local nationals, and contractors. They apply whether the duties are performed full-time, part-time, or as an embedded duty. Future updates to the Manual will incorporate additional portions of the IA workforce.

I want more information, who can I talk to?

For more information about DoD Directive 8570.1 and the enterprise-wide training and certification initiative, contact the IASE Helpdesk.

How can I get a copy of the Manual?

You can obtain a copy of DoD 8570.1M online. 

Will the training and certification requirements specified in DoD Directive 8570.1 and the 8570.1M manual replace Component or community specific training and certification requirements?

No. Directive 8570.1 is providing an enterprise-wide IA knowledge and skill baseline. You still must comply with Component/community specific requirements for IA training and certification.

I am already certified, what more will I need to do?

If you already hold a certification(s) listed in the DoD 8570 1.M Manual, notify your respective personnel point of contact once the manual is signed to make certain that your certification status is documented in the appropriate personnel database of record.

You also will need to maintain your certification status by completing continuous learning requirements as defined by the organization providing your certification (e.g., ISC2, ISACA, CompTIA, etc.). Note that all certifications included in the Manual currently do require or will require in the near future, continuous learning as part of their certification requirements. You are encouraged to monitor current certification provider activity to see if they have imposed additional continuous learning requirements.

Your Component may require personnel performing IA job functions to complete specific certifications identified in the Manual. Confirm with your direct supervisor or IA leadership that you are categorized and certified at the right level and meet the appropriate Component specific requirements.

Do I have to take the training associated with a certification, or can I just take the test?

If you perform job functions outlined in one of the technical or management categories outlined in the Manual, you will need to pass a certification test for a specified certification. Under DoD Directive 8570.1, you will not be required to take specific training to prepare for the certification test.