R 091852Z DEC 10
MARADMIN 689/10
MSGID/GENADMIN,USMTF,2007/CMC WASHINGTON DC C4(UC)/F002//
SUBJ/MCBUL 5239 MARINE CORPS INFORMATION ASSURANCE WORKFORCE IDENTIFICATION, TRACKING, TRAINING, CERTIFICATION, AND REPORTING//
REF/A/MSGID:DOC/107TH CONGRESS/YMD:20021217//
REF/B/MSGID:DOC/SECDEF WASHINGTON DC ASD (NII)/YMD:20070423//
REF/C/MSGID:DOC/SECDEF WASHINGTON DC ASD (NII)/YMD:20100420//
REF/D/MSGID:DOC/SECDEF WASHINGTON DC DON CIO/YMD:20090529//
REF/E/MSGID:DOC/SECDEF WASHINGTON DC DON CIO/YMD:20100617//
REF/F/MSGID:DOC/SECDEF WASHINGTON DC ASD (NII)/YMD:20100430//
NARR/REF A IS PUBLIC LAW 107-347, THE E-GOVERNMENT ACT OF 2002, WHICH DEFINES THE FEDERAL INFORMATION SECURITY MANAGEMENT ACT (FISMA). REF B IS DOD DIRECTIVE 8570.01, INFORMATION ASSURANCE TRAINING, CERTIFICATION, AND WORKFORCE MANAGEMENT, WHICH ESTABLISHES POLICY AND ASSIGNS RESPONSIBILITIES FOR THE DOD INFORMATION ASSURANCE (IA) TRAINING, CERTIFICATION, AND WORKFORCE MANAGEMENT. REF C IS DOD MANUAL 8570.01-M, INFORMATION ASSURANCE WORKFORCE IMPROVEMENT PROGRAM, WHICH PROVIDES GUIDANCE FOR THE IDENTIFICATION AND CATEGORIZATION OF POSITIONS AND CERTIFICATION OF PERSONNEL CONDUCTING IA FUNCTIONS WITHIN THE DOD WORKFORCE SUPPORTING THE DOD GLOBAL INFORMATION GRID (GIG) AND ESTABLISHES IA WORKFORCE (IAWF) OVERSIGHT AND MANAGEMENT REPORTING REQUIREMENTS.
REF D IS SECNAV MANUAL 5239.2, DEPARTMENT OF THE NAVY INFORMATION ASSURANCE (IA) WORKFORCE MANAGEMENT MANUAL TO SUPPORT THE IA WORKFORCE IMPROVEMENT PROGRAM, WHICH DESCRIBES THE DEPARTMENT OF THE NAVY (DON) IAWF MANAGEMENT PLANS AND ESTABLISHES THE DON IAWF OVERSIGHT AND MANAGEMENT REPORTING REQUIREMENTS. REF E IS SECNAVINST 5239.20, DEPARTMENT OF THE NAVY CYBERSECURITY/INFORMATION ASSURANCE WORKFORCE MANAGEMENT, OVERSIGHT, AND COMPLIANCE, WHICH ESTABLISHES POLICY AND ASSIGNS RESPONSIBILITIES FOR THE ADMINISTRATION OF THE DON CYBERSECURITY/IAWF MANAGEMENT OVERSIGHT AND COMPLIANCE PROGRAM. REF F IS ASD (NII) MEMORANDUM, EVOLUTION OF THE INFORMATION ASSURANCE WORKFORCE IMPROVEMENT PROGRAM, WHICH REINFORCES THE IMPORTANCE OF A HOLISTIC APPROACH TO IMPLEMENTATION OF THE IA WORKFORCE IMPROVEMENT PROGRAM (WIP) IN WHICH ALL THE REQUIREMENTS OF REF C, NOT JUST IA CERTIFICATIONS, ARE IMPLEMENTED.//
POC/J. A. CRAWFORD/MGYSGT/UNIT:HQMC C4 IA/NAME:WASHINGTON DC /TEL:7036933490//
POC/J. PARAMADILOK/GYSGT/UNIT:HQMC C4 IA/NAME:WASHINGTON DC /TEL:7036933490//
GENTEXT/REMARKS/1. THIS MARADMIN CLARIFIES EXISTING POLICY AND PROVIDES GUIDANCE FOR IDENTIFYING, TRACKING, TRAINING, CERTIFYING, AND REPORTING THE MARINE CORPS INFORMATION ASSURANCE WORKFORCE (IAWF).
2. BACKGROUND
A. REFERENCES A THROUGH F PROVIDE GUIDANCE AND DIRECTION RELATED TO THE IDENTIFICATION, TRACKING, TRAINING, CERTIFICATION, AND REPORTING OF THE IAWF. THE DEPARTMENT OF DEFENSE (DOD) HAS TAKEN AN AGGRESSIVE APPROACH TO IA COMPETENCY DEVELOPMENT AND TRAINING FOR THE IA WORKFORCE. THE DOD INFORMATION ASSURANCE (IA) STRATEGY IS TO MOVE FROM COMPONENT TO ENTERPRISE-WIDE CERTIFICATION AND TO TIE THAT QUALIFICATION TO A COMMERCIAL VALIDATION PROCESS. THIS APPROACH PROVIDES A BASELINE UPON WHICH THE MARINE CORPS WILL ADVANCE ITS IAWF MANAGEMENT PROGRAMS.
B. IAWF TRACKING DATABASE. THE MARINE CORPS CONTINUES TO EMPLOY THE MARINE CORPS TRAINING AND INFORMATION SYSTEM (MCTIMS) AS THE AUTHORITATIVE DATABASE FOR IDENTIFYING, TRACKING, AND REPORTING THE MARINE CORPS IAWF, WHICH INCLUDES ALL MILITARY, CIVILIANS, AND CONTRACTORS.
C. MILITARY PERSONNEL. ALTHOUGH THERE ARE SEVERAL MILITARY OCCUPATIONAL SPECIALTIES (MOS'S) COMMON TO THE IAWF, MOS'S SHOULD NOT BE THE ONLY DETERMINING FACTOR USED TO IDENTIFY MILITARY PERSONNEL TO BE INCLUDED IN THE IAWF; DETERMINATIONS SHOULD BE BILLET-BASED. POSITIONS THAT REQUIRE PRIVILEGED ACCESS AS DEFINED IN REFERENCE D ARE CONSIDERED TO BE A PART OF THE IAWF. MOS'S THAT SHOULD BE EVALUATED INCLUDE, BUT ARE NOT LIMITED TO, THE FOLLOWING.
0202, 0206, 0211, 0212, 0231, 0241, 0261, 0602, 0603, 0610, 0612, 0619, 0620, 0629, 0640, 0650, 0651, 0653, 0659, 0681, 0689, 0699, 2611, 2621, 2629, 2631, 2651, 2821, 2823, 2847, 2862, 5902, 5910, 5939, 5942, 5948, 5950, 5953, 5954, 5959, 5970, 5974, 5979, 5993, 6694, 8055, 8846, 8848, 8858.
D. CIVILIAN PERSONNEL. IAWF INCLUSION DETERMINATIONS FOR MARINE CORPS CIVILIAN PERSONNEL MUST BE POSITION-BASED. POSITIONS REQUIRING PRIVILEGED ACCESS ARE CONSIDERED PART OF THE IAWF. CIVILIAN IAWF INCLUSION DETERMINATIONS WILL BE MADE USING THE GUIDANCE CONTAINED IN PARAGRAPH 4B OF THIS BULLETIN.
E.  CONTRACTOR PERSONNEL. CONTRACTED POSITIONS REQUIRING IA RESPONSIBLITIES AND PRIVILEGED ACCESS BY CONTRACTOR PERSONNEL MUST DEFINE CERTIFICATION REQUIREMENTS IN THEIR CONTRACT OR STATEMENT OF WORK IN ORDER TO ENFORCE CERTIFICATION REQUIREMENTS SET FORTH IN REFERENCE C. ALL CONTRACTOR POSITIONS REQUIRING PRIVILEGED ACCESS ARE CONSIDERED PART OF THE IAWF.
F. ANY MARINE, CIVILIAN MARINE, OR CONTRACTOR WHO HAS PRIVILEGED ACCESS OR SIGNIFICANT IA MANAGEMENT RESPONSIBILITIES MAY BE CONSIDERED AS PART OF THE IAWF REGARDLESS OF THEIR MOS, CLASSIFICATION, SERIES, OR JOB TITLE. IAWF INCLUSION DETERMINATIONS WILL BE MADE USING THE GUIDANCE CONTAINED IN PARAGRAPH 4B OF THIS BULLETIN.
3. TRAINING. ALL IAWF PERSONNEL MUST MEET ANNUAL CONTINUOUS PROFESSIONAL EDUCATION (CPE) OR ADDITIONAL TRAINING REQUIREMENTS. EXERCISES, SKILLSOFT OR CARNEGIE MELLON E-LEARNING COURSES, CONFERENCES, ON-THE-JOB-TRAINING, WHITE PAPERS, OR INSTRUCTING MAY COUNT TOWARDS CPE. THE OFFICE OF THE SECRETARY OF DEFENSE DEFENSE-WIDE IA PROGRAM, THE DEPARTMENT OF THE NAVY (DON) CHIEF INFORMATION OFFICER, AND SERVICE OFFICES OF PRIMARY RESPONSIBILITIES ARE WORKING WITH VENDORS TO DETERMINE SECIFIC EDUCATIONAL ACTIVITIES THAT WILL BE COUNTED UNDER THE CPE PROGRAM.
A. CONTINUING PROFESSIONAL EDUCATION (CPE). A MINIMUM OF 40 HOURS OF CPE IN THE FIELD OF IA MUST BE COMPLETED ANNUALLY.
B. TRAINING AND CERTIFICATION RESOURCES ARE PROVIDED ON THE HEADQUARTERS MARINE CORPS (HQMC) COMMAND, CONTROL, COMPUTERS, AND COMMUNICATIONS DEPARTMENT (C4) IA TRAINING WEBSITE AT HTTPS:(SLASH SLASH)HQDOD.HQMC.USMC.MIL(SLASH)IA(SLASH)PAGES(SLASH)TRAINING.ASP.
(1) COMMUNICATION TRAINING CENTERS (CTC'S). ALL MILITARY AND DOD/DON CIVILIAN IAWF PERSONNEL MAY REQUEST TRAINING FOR THEIR REQUIRED IA AND COMMERCIAL OPERATING SYSTEM/COMPUTING ENVIRONMENT (OS/CE) CERTIFICATION(S) THROUGH THE MARINE CORPS CTC'S AT HTTPS:(SLASH SLASH)WWW.29PALMS.USMC.MIL(SLASH)CTC(SLASH)TRNGSCHEDULE.ASP.
(2) ONLINE TRAINING AND DISTANCE LEARNING. ALL MARINES AND DOD/DON CIVILIANS ARE ENCOURAGED TO USE ONLINE TRAINING AND DISTANCE LEARNING TOOLS TO THE MAXIMUM EXTENT POSSIBLE. SEVERAL OPTIONS ARE AVAILABLE, INCLUDING THE FOLLOWING.
(A) MARINENET. THE MARINENET LEARNING MANAGEMENT SYSTEM (LMS) IS LOCATED AT HTTPS:(SLASH SLASH)WWW.MARINENET.USMC.MIL(SLASH)MARINENET(SLASH)DEFAULT.ASPX. A SUITE OF E-LEARNING COURSES ARE AVAILABLE THAT INCLUDES A COMPREHENSIVE TRAINING PROGRAM DEVELOPED BY SKILLSOFT THAT SUPPORTS THE DOD IA WORKFORCE IMPROVEMENT PROGRAM (WIP).
(B) CARNEGIE MELLON SOFTWARE ENGINEERING INSTITUTE (SEI) VIRTUAL TRAINING ENVIRONMENT (VTE). CARNEGIE MELLON UNIVERSITY'S SEI WORKS CLOSELY WITH THE DEFENSE INFORMATION SYSTEMS AGENCY (DISA) AND THE DEPARTMENT OF HOMELAND SECURITY (DHS) TO ENSURE THE VTE SUPPORTS THE IA WIP. THEIR WEBSITE IS LOCATED AT HTTPS:(SLASH)(SLASH) WWW.VTE.CERT.ORG(SLASH)VTEWEB(SLASH).
(3) VOUCHERS. MILITARY AND DOD/DON CIVILIAN IAWF PERSONNEL MAY REQUEST CERTIFICATION TEST VOUCHERS IN ACCORDANCE WITH THE VOUCHER REQUEST PROCESS AVAILABLE AT THE C4 IA TRAINING WEBSITE ADDRESS PROVIDED IN PARAGRAPH 3A ABOVE.
4. POLICY
A. COMMANDERS, COMMAND INFORMATION OFFICERS, AND INFORMATION ASSURANCE MANAGERS (IAM) SHALL ENSURE ALL MARINE CORPS IAWF PERSONNEL ARE IDENTIFIED, TRACKED, AND REPORTED IN MCTIMS IN ACCORDANCE WITH REFERENCES C, D, AND E. IAM AND INFORMATION ASSURANCE OFFICERS (IAO) MAY REQUEST A MCTIMS ADMINISTRATOR ACCOUNT FOR IAWF TRACKING REQUIREMENTS. ADDITIONAL INFORMATION IS PROVIDED ON THE HQMC C4 IAWF WEBSITE AT HTTPS:(SLASH SLASH)HQDOD.HQMC.USMC.MIL (SLASH)IAWF.ASP.
SUBMIT REQUESTS FOR MCTIMS ADMINISTRATOR ACCOUNTS TO HQMC C4 IA BY SENDING A DIGITALLY SIGNED EMAIL TO IAWF (AT)USMC.MIL ALONG WITH THE FOLLOWING INFORMATION:
  -FIRST NAME
  -LAST NAME
  -COMMERCIAL PHONE NUMBER
  -DSN PHONE NUMBER
  -E-MAIL
  -UNIT AND COMMAND
  -SIGNED COPY OF THE IAM OR IAO APPOINTMENT LETTER B. IAWF INCLUSION DETERMINATION FOR MARINES, DOD/DON CIVILIANS, AND CONTRACTORS CAN BE ACCOMPLISHED BY COMPLETING THE IAWF DETERMINATION QUESTIONNAIRE IN APPENDIX F OF REFERENCE D.
(1) MILITARY. ALL MILITARY PERSONNEL IDENTIFIED IN THE IAWF DETERMINATION MATRIX LOCATED AT REFERENCE H MUST BE TRAINED AND CERTIFIED AS INDICATED IN THE MATRIX WITH THE FOLLOWING CAVEAT; THE IAWF DETERMINATION MATRIX IS A RECOMMENDED BEST PRACTICE AND IS NOT MEANT TO BE AN ALL-INCLUSIVE LIST OF IAWF MOS'S. RECOMMENDATIONS TO INCLUDE ADDITIONAL MOS'S IN THE DETERMINATION TOOL CAN BE SUBMITTED TO THE REFERENCED POINTS OF CONTACT (POC) IN THIS MESSAGE.
(2) DOD/DON CIVILIANS. ALL DOD/DON CIVILIANS IDENTIFIED AS PART OF THE MARINE CORPS IAWF MUST BE TRAINED AND CERTIFIED TO THE APPROPRIATE CATEGORY AND LEVEL AS DETERMINED BY THEIR COMMAND IAM OR IAO IN ACCORDANCE WITH GUIDANCE PROVIDED IN CHAPTERS 3, 4, 5, 10, AND
11 OF REFERENCE C.
(3) CONTRACTORS. CONTRACTORS SUPPORTING IA FUNCTIONS IN CHAPTERS 3, 4, 10, AND 11 OF REFERENCE C MUST BE CERTIFIED TO THE APPROPRIATE CATEGORY AND LEVEL.
C. ALL IAWF PERSONNEL IN THE INFORMATION ASSURANCE TECHNICAL (IAT) CATEGORIES MUST ADHERE TO THE FOLLOWING REQUIREMENTS:
(1) BE CERTIFIED WITH THE APPROPRIATE COMMERCIAL IA CERTIFICATION BY
31 DECEMBER 2010 PER REFERENCE C.
(2) BE CERTIFIED WITH THE APPROPRIATE COMMERCIAL OS/CE CERTIFICATION BY 31 DECEMBER 2010 PER REFERENCES C AND D.
D. ALL IAWF PERSONNEL IN THE IAM CATEGORIES MUST ADHERE TO THE REQUIREMENT SPECIFIED IN PARA 4C(1) OF THIS MESSAGE.
E. ALL IAWF PERSONNEL IN THE COMPUTER NETWORK DEFENSE-SERVICE PROVIDER (CND-SP) CATEGORIES, WITH THE EXCEPTION OF CND-SP MANAGER, MUST ADHERE TO THE REQUIREMENT SPECIFIED IN PARA 4C(2) OF THIS MESSAGE.
F. ALL IAWF PERSONNEL WITH PRIVILEGED ACCESS SHALL COMPLETE A "PRIVILEGED ACCESS AGREEMENT" IN ACCORDANCE WITH REFERENCE C. AN EXAMPLE OF THAT AGREEMENT CAN BE FOUND IN APPENDIX 4 OF REFERENCE C.
G. ALL DOD/DON IAWF CIVILIAN POSITION DESCRIPTIONS AND IAWF CONTRACTOR STATEMENTS OF WORK/CONTRACTS MUST BE MODIFIED BY 31 DECEMBER 2010 TO IDENTIFY THE SPECIFIC IAWF CATEGORY, LEVEL, OS/CE CERTIFICATION (IF APPLICABLE) REQUIRED BY THE POSITION, AND INCLUDE THE "CONDITION OF EMPLOYMENT" PER REFERENCE H IN ACCORDANCE WITH REFERENCES C AND D.
H. ALL MILITARY, DOD/DON CIVILIAN, AND CONTRACTOR PERSONNEL IDENTIFIED AS BEING A PART OF THE IAWF MUST RELEASE THEIR CERTIFICATION INFORMATION TO THE DOD THROUGH THE DEFENSE WORKFORCE CERTIFICATION APPLICATION (DWCA) LOCATED AT: HTTPS:(SLASH)(SLASH) WWW.DMDC.OSD.MIL(SLASH)APPJ(SLASH)DWC(SLASH)INDEX.JSP. FOR MILITARY AND CIVILIAN PERSONNEL, REGISTERING YOUR CERTIFICATION(S) IN THE DWCA WILL ALSO ENSURE THAT ANY MAINTENANCE FEES ASSOCIATED WITH THE CERTIFICATION CAN BE PAID FOR BY THE DOD (UNTIL 2011).
5. ACTION: G-6/COMMAND IAM AND IAO
A. CONTINUE TO IMPLEMENT ACTION PLANS TO COMPLY WITH REFERENCES C THROUGH E AND THIS BULLETIN.
B. CONTINUE TO ENSURE THAT ALL INFORMATION SYSTEMS USERS (MILITARY, CIVILIANS, AND CONTRACTORS) RECEIVE INITIAL AND REFRESHER IA AWARENESS AND PERSONALLY IDENTIFIABLE INFORMATION (PII) TRAINING ON AN ANNUAL BASIS (ONCE PER CALENDAR YEAR).
6. RESERVE APPLICABILITY. THIS BULLETIN IS APPLICABLE TO THE MARINE CORPS TOTAL FORCE AND TO CONTRACTORS WHO SUPPORT THE MARINE CORPS RESERVE.
7. CANCELLATION CONTINGENCY. THIS MCBUL, UNLESS SUPERCEDED, IS CANCELLED ONE YEAR FROM DATE OF PUBLICATION.
8. RELEASE AUTHORIZED BY BGEN K. J. NALLY, DIRECTOR, COMMAND, CONTROL, COMMUNICATIONS, AND COMPUTERS DEPARTMENT/DEPUTY DON CIO (MARINE CORPS).//