|
|
|
|
 |
|
|
Description
In addition to concepts taught in the DIACAP Introduction, the DIACAP 3 Day In-Depth course provides an in-depth look into the DIACAP process and hands-on training of developing the DIACAP Systems Identification Profile (SIP), DIACAP Implementation Plan (DIP), and Plan of Actions and Milestones (POA&M). DoD 8500 series is covered in this course. A focus is also on DIACAP activities & documentation requirements.
Topics Covered:
Day 1:
DIACAP Introduction and Ground Rules Background: Legislation, Policy, Guidance
C&A Overview and DoD IA Policy
Introduction to the DIACAP
DIACAP Activities and Workflow: Initiating the DIACAP
DIACAP Activity Cycle
Day 2:
DIACAP Workflow: SIP and DIP
DIACAP Workflow: Initiate and Plan the C&A
DIACAP Workflow: Implement and Validate Controls
DIACAP Workflow: Certification Determination and Accreditation Decision
Day 3:
DIACAP Workflow: Accreditation and Conduct Reviews
DIACAP Workflow: Decommission System
DIACAP and the SDLC: Understanding the Role of C&A in Acquisition and Development
DIACAP and the Army's Processes Connection Approval Process (CAP)
Laws, Directives, Instructions, Standards, and Publications Covered:
DoD Directive, 8500.1, Information Assurance
DoD Instruction 8500.2, Information Assurance Implementation
DoD Instruction 8510.01, DoD Information Assurance Certification and Accreditation Process (DIACAP)
DoD 5200.2-R DoD Personnel Security Program
DoD Security Technical Implementation Guides (STIGs)
NSTISSP No. 11, National Information Assurance Protection (NIAP)
DoD 8570.01M
DoD Information Assurance Workforce Improvement Program
Federal Information Processing Standard (FIPS) 200
Federal Information Processing Standard (FIPS) 140-2
DISA Security Readiness Review Scripts (SRR)
Federal Information Security Management Act (FISMA)
Office of Management and Budget (OMB) A-130
OMB 04-04 E-Authentication Guidance for Federal Agencies
System Identification Profile (SIP)
DIACAP Implementation Plan (DIP)
DIACAP Scorecard
Plan of Actions and Milestones (POA&M)
|
|
|
|
