Attachment 5 DoD Approved 8570 Baseline Certifications DoD Cyber Exchange.pdf

PDF 86 KB Posted

Attached to
ESS Maintenance Corpus Christi Federal contract opportunity
Solicitation number
SP330022Q5024
Issued by
Defense Logistics Agency Distribution

About this file

This document contains a list of approved baseline cybersecurity certifications for the Department of Defense information assurance workforce and the certification providers associated with each. The certifications are organized by category and level, with most categories having multiple approved certifications that satisfy each level requirement. Higher level certifications satisfy lower level requirements within the same category.

The related federal contract opportunity is a solicitation for equipment maintenance and repair services at the Defense Logistics Agency distribution site in Corpus Christi, Texas. The solicitation includes attachments with additional details on the required services.

View the file

Other files for this federal contract opportunity

Other files attached to ESS Maintenance Corpus Christi, newest first.
File Type Posted
Tab C-6 MANDEX Questions Answers.pdf PDF
Tab C-6 MATRIX-Series-5-and-6-Installation-Service-Guide.pdf PDF
Tab C-6 SF30 Amendment.pdf PDF
Attachment 9 Schedule of Services.pdf PDF
Attachment 6 Deliverable Table.pdf PDF
Attachment 2 Equipment List.pdf PDF
Attachment 1 - PWS ESS Maint Corpus Christi.pdf PDF
Attachment 4 Wage Determination.pdf PDF
Attachment 3 Maint Task List.pdf PDF
Tab C-10 Combined Synopsis.pdf PDF
Attachment 8 CAC_Procedures.pdf PDF
Attachment 7 Contractor Personnel Sec.pdf PDF
Show all 12

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

4/7/22, 11:48 AM DoD Approved 8570 Baseline Certifications – DoD Cyber Exchange

Approved Baseline Certifications

IAT Level I IAT Level II IAT Level III

A+ CE

CCNA-Security

CND

Network+ CE

SSCP

CCNA Security

CySA+ **

GICSP

GSEC

Security+ CE

CND

SSCP

CASP+ CE

CCNP Security

CISA

CISSP (or Associate)

GCED

GCIH

CCSP

IAM Level I IAM Level II IAM Level III

CAP

CND

Cloud+

GSLC

Security+ CE

HCISPP

CAP

CASP+ CE

CISM

CISSP (or Associate)

GSLC

CCISO

HCISPP

CISM

CISSP (or Associate)

GSLC

CCISO

IASAE I IASAE II IASAE III

CASP+ CE

CISSP (or Associate)

CSSLP

CASP+ CE

CISSP (or Associate)

CSSLP

CISSP-ISSAP

CISSP-ISSEP

CCSP

CSSP Analyst1 CSSP Infrastructure Support1 CSSP Incident Responder1

CEH

CFR

CCNA Cyber Ops

CCNA-Security

CySA+ **

GCIA

GCIH

CEH

CySA+ **

GICSP

SSCP

CHFI

CFR

CEH

CFR

CCNA Cyber Ops

CCNA-Security

CHFI

CySA+ **

GCFA

GICSP

Cloud+

SCYBER

PenTest+

Cloud+

CND

GCIH

SCYBER

PenTest+

CSSP Auditor1 CSSP Manager1

CEH

CySA+ **

CISA

GSNA

CFR

PenTest

CISM

CISSP-ISSMP

CCISO

The above table provides a list of DoD approved IA baseline certifications aligned to each category and level of the IA Workforce. Personnel performing IA functions must obtain one of the certifications required for their position, category/specialty and level to fulfill the IA baseline certification requirement. Most IA levels within a category or specialty have more than one approved certification and a certification may apply to more than one level.

An individual needs to obtain only one of the “approved certifications”; for his or her IA category or specialty and level to meet the minimum requirement. For example, an individual in an IAT Level II position could obtain any one of the four certifications listed in the IAT Level II cell.

Higher level IAT and IAM certifications satisfy lower level requirements. Certifications listed in Level II or III cells can be used to qualify for Level I. However, Level I certifications cannot be used for Level II or III unless the certification is also listed in the Level II or III cell. For example:

The A+ or Network+ certification qualify only for Technical Level I and cannot be used for Technical Level II positions.

The System Security Certified Practitioner (SSCP) certification qualifies for both Technical Level I and Technical Level II. If the individual holding this certification moved from an IAT Level I to an IAT Level II position, he or she would not have to take a new certification.

Higher level CSSP and IASAE certifications do not satisfy lower level requirements

1. This certification is equivalent to the CND-SP certification cited in the DoD 8570.01-M.

The name was changed from CND-SP to CCSP to reflect current terminology in the DoD Instruction 8530.01 “Cybersecurity Activities Support to DoD Information Network Operations.

The table below lists the Certification Providers associated with each approved certification.

IA Workforce Certification Providers

CERTIFICATION

PROVIDER

CERTIFICATION NAME

CertNexus * CyberSec First Responder (CFR)

Cisco * Cisco Certified Network Associate-Security (CCNA-Security)

Cisco * Cisco Certified Network Professional-Security (CCNP-Security)

Cisco * Cybersecurity Specialty Certification (SCYBER)

Computing Technology

Industry Association

(CompTIA) *

A+ Continuing Education (CE)

CompTIA * Cloud Plus (Cloud+)

CompTIA * Security+ Continuing Education (CE)

CompTIA * CompTIA Advanced Security Practitioner (CASP) Continuing Education

(CE)

CompTIA * Network+ Continuing Education (CE)

CompTIA * Cybersecurity Analyst (CySA+ **)

CompTIA * PenTest+

CERTIFICATION

PROVIDER

CERTIFICATION NAME

EC-Council * Certified Ethical Hacker (CEH)

EC-Council * Certified Chief Information Security Officer (CCISO)

EC-Council * Computer Hacking Forensics Investigator (CHFI)

EC-Council * Certified Network Defender (CND)

International Information

Systems Security

Certifications Consortium

(ISC)2 *

Certified Information Systems Security Professional (CISSP) (or Associate

- this means the individual has qualified for the certification except for the number of years experience)

(ISC)2 * Certified Secure Software Lifecycle Professional (CSSLP)

(ISC)2 * Certification Authorization Professional (CAP)

(ISC)2 * Information Systems Security Architecture Professional (ISSAP)

(ISC)2 * Information Systems Security Engineering Professional (ISSEP)

(ISC)2 * Information Systems Security Management Professional (ISSMP)

(ISC)2 * System Security Certified Practitioner (SSCP)

(ISC)2 * Certified Cloud Security Professional (CCSP)

(ISC)2 * Health Care Information Security and Privacy Practitioner (HCISPP)

Information Systems Audit and

Control Association (ISACA) *

Certified Information Security Manager (CISM)

ISACA * Certified Information Systems Auditor (CISA)

Global Information Assurance

Certification (GIAC) *

GIAC Certified Intrusion Analyst (GCIA)

GIAC * GIAC Certified Enterprise Defender (GCED)

GIAC * GIAC Certified Forensic Analyst (GCFA)

CERTIFICATION

PROVIDER

CERTIFICATION NAME

GIAC * GIAC Certified Incident Handler (GCIH)

GIAC * GIAC Global Industrial Cyber Security Professional (GICSP)

GIAC * GIAC Security Essentials Certification (GSEC)

GIAC * GIAC Security Leadership Certificate (GSLC)

GIAC * GIAC Systems and Network Auditor (GSNA)

Logical Operations, Inc. * CyberSec First Responder (CFR)

The GIAC GSE and GISF were removed from the approved list on 25 January 2013.

Individuals holding one of these certifications to qualify for their current IA position will remain qualified. However, a different certification may be required once the GIAC GSE or GISF expires or if the individual changes positions requiring a different certification.

* This organization is the sole propriety owner of the memberships, site licenses, preassessments, test vouchers, and all other materials related to this certification and their association.

** CySA+ is a CompTIA certification formerly listed as CSA+. The exam and the official name of the certification remain the same, only the acronym has changed.

File details come from the government source that posted it. Updated .