530d7.2

Case Project 14-1: Information Security Certifications
To ensure that information technology workers maintain up-to-date knowledge about information security, many employers require periodic certification. An ever-growing list of information security certifications is offered by a variety of vendors. Some commonly sought certifications are administered by ISC2, SANS, and CompTIA. U.S. Department of Defense directive DoD 8570 includes certification requirements for both DoD workers and support contractors. The directive defines employee position levels and certifications required at these levels. As of this writing, the latest version of the directive is 8570.01-M (www.dtic.mil/whs/directives/corres/pdf/857001m.pdf).

For this project, summarize the requirements of DoD 8570 in your own words. Include a definition of the three IAT (Information Assurance Technical) position levels. Describe the typical tasks performed by these workers, list the certification requirements for these levels, and include a summary of the objectives of each certification required at these levels.