New hire qualification periods to meet Directive 8570 certification requirements begin the date they start in their duty position – so they must obtain the appropriate baseline certification within six months of being assigned to IA functions).
DoDD 8570 Requires:
- By the end of CY 2010, all personnel performing IAT and IAM functions must be certified.
- By the end of CY 2011 all personnel performing CND-SP and IASAE roles must be certified.
- All IA jobs will be categorized as 'Technical' or 'Management' Level I, II, or III, and to be qualified for those jobs, you must be certified.
| IAT Level I | IAT Level II | IAT Level III |
| A+ Network+ SSCP |
GSEC Security+ SCNP SSCP |
CISA CISSP GSE SCNA GCIH |
| IAM Level I | IAM Level II | IAM Level III |
| CAP GISF GSLC Security+ |
CAP GSLC CISM CISSP (or Associate) |
GSLC CISM CISSP (or Associate) |
| IASAE I | IASAE II | IASAE III |
| CISSP (or Associate) | CISSP (or Associate) | CISSP – ISSEP CISSP – ISSAP |
| CND Analyst | CND Infrastructure Support | CND Incident Reporter | CND Auditor | CND-SP Manager |
| GCIA CEH |
SSCP CEH |
GCIH CSIH CEH |
CISA GSNA CEH |
CISSP-ISSMP CISM |
| New Horizons 8570.1 Information Assurance Certification Training |
|
| New Horizons Operating Systems / Technical Environment Certification Training |
|
