R 290232Z APR 10
UNCLASSIFIED//
MARADMIN 251/10
MSGID/GENADMIN,USMTF,2007/CMC WASHINGTON DC C4(UC)/F002//
SUBJ/MCBUL 5239 MARINE CORPS CERTIFICATION AND ACCREDITATION PROCESS (MCCAP) VALIDATOR REQUIREMENTS//
REF/A/MSGID:DOC/-/YMD:20071028//
REF/B/MSGID:DOC/-/YMD:20090610//
REF/C/MSGID:DOC/-/YMD:20021024//
REF/D/MSGID:DOC/-/YMD:20080902//
REF/E/MSGID:DOC/-/YMD:20080721//
NARR/REF A, DOD INSTRUCTION 8510.01, IS THE DEPARTMENT OF DEFENSE (DOD) CERTIFICATION AND ACCREDITATION (C AND A) POLICY.  REF B, FEDERAL INFORMATION SECURITY MANAGEMENT ACT 2002, PROVIDES REQUIREMENTS TO SECURE INFORMATION SYSTEMS AND REPORT COMPLIANCE. REF C, DOD DIRECTIVE 8500.1E, IMPLEMENTS THE DIACAP.  REF D, MC ENTERPRISE INFORMATION ASSURANCE DIRECTIVE 018, IS THE USMC C AND A DIRECTIVE.  REF E, DON DIACAP HANDBOOK, PROVIDES DEPARTMENT OF NAVY (DON) GUIDANCE IN COMPLETING THE REQUIREMENTS OF THE DIACAP.//
POC/A. QUINONES/CTR/UNIT:C4IA/-/TEL:2233477//
POC/J. F. DOBRYDNEY/MAJ/UNIT:C4IA/-/TEL:2233490//
GENTEXT/REMARKS/1. THIS DOCUMENT ANNOUNCES POLICY AND REQUIREMENTS RELATED TO THE VALIDATOR DURING THE MARINE CORPS CERTIFICATION AND ACCREDITATION PROCESS.
2. BACKGROUND.
A. THE VALIDATOR IS RESPONSIBLE FOR APPLICABLE INFORMATION ASSURANCE CONTROLS (IAC) VALIDATION FOR INFORMATION SYSTEMS RESIDING WITHIN THE MARINE CORPS ENTERPRISE NETWORK (MCEN).  DUE TO A CONFLICT OF INTEREST, THE SECURITY ENGINEERING AND SECURITY VALIDATION FUNCTIONS CANNOT BE PERFORMED BY THE SAME PERSON OR GROUP.  VALIDATOR REQUIREMENTS ARE DETAILED BELOW.
B. TRAINING REQUIREMENTS.  SUCCESSFUL COMPLETION OF THE FOLLOWING COURSES: MCEN VALIDATOR COURSE, SECURE CONFIGURATION COMPLIANCE VALIDATION INITIATIVE (SLASH) SECURE COMPLIANCE REMEDIATION INITIATIVE (SCVVI (SLASH) SCRI), AND BLUE TEAM METHODOLOGY (INCLUDES JOINT IA ASSESSMENT).
C. CERTIFICATION REQUIREMENTS.  ACHIEVEMENT OF DOD INSTRUCTION (DODI) 8570 INFORMATION ASSURANCE TECHNICIAN (IAT) LEVEL III OR HIGHER.  BEGINNING 1 OCT 2011, COMPLETION OF NATIONAL SECURITY TELECOMMUNICATIONS AND INFORMATION SYSTEMS SECURITY INSTRUCTION (NSTISSI) 4015 WILL ALSO BE REQUIRED.
3. ACTION.
A. EFFECTIVE IMMEDIATELY, ALL VALIDATORS NOT CURRENTLY ASSIGNED TO EXISTING PROJECTS IN THE AUTOMATED C AND A TOOL (XACTA) IN SUPPORT OF MARINE CORPS C AND A ACTIVITIES MUST COMPLETE THE FOLLOWING ACTIONS:
(1) SUBMIT "THE APPLICATION FOR MARINE CORPS VALIDATOR" TO THE MCEN DESIGNATED ACCREDITATION AUTHORITY (DAA) FOR APPROVAL TO PERFORM VALIDATIONS ON MARINE CORPS INFORMATION SYSTEMS.  EMAIL APPLICATIONS TO THE MCEN C AND A TEAM: OPERATIONSCENTER@MCNOSC.USMC.MIL. THE APPLICATION CAN BE DOWNLOADED FROM HTTPS:(DOUBLESLASH)HQDOD.HQMC.USMC.MIL(SLASH)CA.ASP.  ENSURE ALL SUPPORTING DOCUMENTATION IS SUBMITTED WITH THE APPLICATION.
(2) ONCE THE VALIDATOR IS RECOMMENDED BY THE MCEN C AND A TEAM AND APPROVED BY THE MCEN DESIGNATED ACCREDITING AUTHORITY (DAA), MCEN C AND A WILL INCLUDE THE VALIDATOR INFORMATION ON A QUALIFIED VALIDATORS LIST AND A MEMBERSHIP CARD WILL BE ASSIGNED WITHIN 30 WORKING DAYS. VALIDATORS ARE AUTHORIZED TO PERFORM VALIDATION DUTIES IMMEDIATELY UPON LIST INCLUSION.
(3) ADHERE TO THE QUALIFICATIONS OUTLINED IN PARAGRAPH 2 AND MAINTAIN THE SKILLS, EDUCATION, AND CERTIFICATIONS NECESSARY TO CONDUCT TECHNICAL AND NON-TECHNICAL INFORMATION ASSURANCE ASSESSMENTS OF MARINE CORPS INFORMATION SYSTEMS.
B. VALIDATOR REGISTRATION IS VALID FOR TWO YEARS FROM DATE OF INCLUSION. MEMBERS MUST RESUBMIT REQUESTS USING THE PROCESS AS OUTLINED IN PARAGRAPH 2.
4. DIRECT ANY SPECIFIC QUESTIONS TO THE MCEN C AND A TEAM BY CALLING DSN 278-5300, COMM 703-784-5300, OR VIA UNCLASSIFIED E-MAIL TO: OPERATIONSCENTER@MCNOSC.USMC.MIL.  A TROUBLE TICKET WILL BE OPENED FOR C AND A TEAM RESOLUTION.
5. CANCELLATION.  THIS BULLETIN, UNLESS SUPERSEDED, IS CANCELLED 1 APRIL 2011.
6. RELEASE AUTHORIZED BY MAJGEN G. J. ALLEN, DIRECTOR, COMMAND, CONTROL, COMMUNICATIONS, AND COMPUTERS/CHIEF INFORMATION OFFICER OF THE MARINE CORPS.//