ATTACHMENT 9 TO RFQ SP330020Q0108 DOD 8570 APPROVED BASELINE CERTS.pdf
PDF 802 KB Posted
- Solicitation number
- SP330020Q0108
- Issued by
-
Defense Logistics Agency Distribution
About this file
This document provides the Defense Logistics Agency's approved baseline certifications for individuals performing information assurance functions under Request for Quote SP330020Q0108. The RFQ seeks maintenance support services for Lenel electronic security and Pelco closed circuit television systems at DLA Distribution Norfolk. The contractor must provide preventative maintenance, service calls, repairs, and replacement parts to keep the security and CCTV systems in good operating condition. The government intends to award a firm-fixed-price and time-and-materials contract for these services. The document outlines the required DoD 8570 certification levels and approved certifications for information assurance categories including IAT, IAM, CSSP, and IASAE.
View the file
Other files
Show all 15
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DOD 8570 Approved Baseline Certifications as of 02/04/2020 New Approved 8570 Baseline Certifications in “RED” as of 2/4/2020
IAT Level I IAT Level II IAT Level III
A+ CE
CCNA-Security Network+ CE
SSCP
CND
CCNA Security CND CySA+ **
GICSP
GSEC
Security+ CE
SSCP
CASP+ CE
CCNP Security
CISA
CISSP (or Associate)
GCED
GCIH
IAM Level I IAM Level II IAM Level III
CAP
GSLC
Security+ CE
CND
Cloud+
CAP
CASP+ CE
CISM
CISSP (or Associate)
GSLC
CCISO
CISM
CISSP (or Associate)
GSLC
CCISO
IASAE Level I IASAE Level II IASAE Level III
CASP+ CE
CISSP (or Associate)
CSSLP
CASP+ CE
CISSP (or Associate)
CSSLP
CISSP-ISSAP
CISSP-ISSEP
CSSP Analyst CSSP Infrastructure Support CSSP Incident Responder
CEH
CFR
CCNA Cyber Ops CCNA-Security CySA+ **
GCIA
GCIH
GICSP
SCYBER Cloud+
CEH
CySA+ **
GICSP
SSCP
CHFI
CFR
CND
Cloud+
CEH
CFR
CCNA Cyber Ops CCNA-Security
CHFI
CySA+ **
GCFA
GCIH
SCYBER
CSSP Auditor CSSP Manager
CEH
CySA+ **
CISA
GSNA
CFR
CISM
CISSP-ISSMP
CCISO
ATTACHMENT 9 TO RFQ SP330020Q0108 Page 1 of 6
As an extension of Appendix 3 to the DOD 8570.01-Manual, the following certifications listed above have been approved as IA baseline certifications for the IA Workforce. Personnel performing IA functions must obtain one of the certifications required for their position category or specialty and level. Refer to Appendix 3 of 8570.01-M for further implementation guidance.
The above table provides a list of DoD approved IA baseline certifications aligned to each category and level of the IA Workforce. Personnel performing IA functions must obtain one of the certifications required for their position, category/specialty and level to fulfill the IA baseline certification requirement.
Most IA levels within a category or specialty have more than one approved certification and a certification may apply to more than one level.
An individual needs to obtain only one of the “approved certifications”; for his or her IA category or specialty and level to meet the minimum requirement.
For example, an individual in an IAT Level II position could obtain any one of the four certifications listed in the IAT Level II cell.
Higher level IAT and IAM certifications satisfy lower level requirements.
Certifications listed in Level II or III cells can be used to qualify for Level I.
However, Level I certifications cannot be used for Level II or III unless the certification is also listed in the Level II or III cell. For example:
• The A+ or Network+ certification qualify only for Technical Level I and cannot be used for Technical Level II positions.
• The System Security Certified Practitioner (SSCP) certification qualifies for both Technical Level I and Technical Level II. If the individual holding this certification moved from an IAT Level I to an IAT Level II position, he or she would not have to take a new certification.
Higher level CSSP and IASAE certifications do not satisfy lower level requirements.
1. This certification is equivalent to the CND-SP certification cited in the DoD 8570.01-M. The name was changed from CND-SP to CCSP to reflect current terminology in the DoD Instruction 8530.01 “Cybersecurity Activities Support to DoD Information Network Operations.
ATTACHMENT 9 TO RFQ SP330020Q0108 Page 2 of 6
The table below lists the Certification Providers associated with each approved certification.
IA Workforce Certification Providers
Certification Provider Certification Name
CertNexus * CyberSec First Responder (CFR)
Cisco * Cisco Certified Network Associate-Security (CCNA-Security)
Cisco * Cisco Certified Network Professional-Security (CCNP-Security)
Cisco * Cybersecurity Specialty Certification
(SCYBER)
Computing Technology Industry Association (CompTIA) *
A+ Continuing Education (CE)
CompTIA * Security+ Continuing Education (CE)
CompTIA * CompTIA Advanced Security Practitioner (CASP) Continuing Education (CE)
ATTACHMENT 9 TO RFQ SP330020Q0108 Page 3 of 6
CompTIA * Cloud+
CompTIA * Network+ Continuing Education (CE)
CompTIA * Cybersecurity Analyst (CySA+ **)
EC-Council * Certified Ethical Hacker (CEH)
EC-Council * Certified Chief Information Security Officer
(CCISO)
EC-Council * Certified Network Defender (CND)
EC-Council * Computer Hacking Forensics Investigator
(CHFI)
International Information Systems Security Certifications Consortium
(ISC)2 *
Certified Information Systems Security Professional (CISSP) (or Associate - this means the individual has qualified for the certification except for the number of years experience)
(ISC)2 *
Certified Secure Software Lifecycle Professional (CSSLP)
ATTACHMENT 9 TO RFQ SP330020Q0108 Page 4 of 6
(ISC)2 * Certification Authorization Professional (CAP)
(ISC)2 *
Information Systems Security Architecture Professional (ISSAP)
(ISC)2 *
Information Systems Security Engineering Professional (ISSEP)
(ISC)2 *
Information Systems Security Management Professional (ISSMP)
(ISC)2 * System Security Certified Practitioner (SSCP)
Information Systems Audit and Control Association
(ISACA) *
Certified Information Security Manager
(CISM)
ISACA * Certified Information Systems Auditor (CISA)
Global Information Assurance Certification
(GIAC) *
GIAC Certified Intrusion Analyst (GCIA)
GIAC * GIAC Certified Enterprise Defender (GCED)
ATTACHMENT 9 TO RFQ SP330020Q0108 Page 5 of 6
GIAC * GIAC Certified Forensic Analyst (GCFA)
GIAC * GIAC Certified Incident Handler (GCIH)
GIAC *
GIAC Global Industrial Cyber Security Professional (GICSP)
GIAC * GIAC Security Essentials Certification (GSEC)
GIAC * GIAC Security Leadership Certificate (GSLC)
GIAC * GIAC Systems and Network Auditor (GSNA)
Logical Operations, Inc. * CyberSec First Responder (CFR)
The GIAC GSE and GISF were removed from the approved list on 25 January 2013. Individuals holding one of these certifications to qualify for their current IA position will remain qualified. However, a different certification may be required once the GIAC GSE or GISF expires or if the individual changes positions requiring a different certification.
* This organization is the sole propriety owner of the memberships, site licenses, preassessments, test vouchers, and all other materials related to this certification and their association.
** CySA+ is a CompTIA certification formerly listed as CSA+. The exam and the official name of the certification remain the same, only the acronym has changed.
ATTACHMENT 9 TO RFQ SP330020Q0108 Page 6 of 6
IA Workforce Certification Providers
File details come from the government source that posted it. Updated .