200 likes | 1.01k Views
DoD CIO. Cyberspace Workforce June 2013. Ms. Stephanie L. Keith , CISSP Cyberspace Workforce Initiatives DoD-CIO, DCIO-CS, DIAP. Agenda. DoD’s Cyberspace Workforce National Initiative for Cybersecurity Education (NICE) Policy Updates. DoD’s Cyberspace Workforce .
E N D
DoD CIO Cyberspace Workforce June 2013 Ms. Stephanie L. Keith, CISSP Cyberspace Workforce Initiatives DoD-CIO, DCIO-CS, DIAP
Agenda • DoD’s Cyberspace Workforce • National Initiative for Cybersecurity Education (NICE) • Policy Updates
DoD’s Cyberspace Workforce • Multiple Collaborative efforts currently underway • Assess DoD’scyberspace missions and associated work roles • Define the cyberspace workforce(s) • Establish a DoD cyberspace workforce framework • Identify qualification requirements • Draft Policy • Outcomes expected in Fall 2013
National Initiative for Cybersecurity Education (NICE) Framework Categories The Framework organizes cybersecurity into seven high-level categories, each comprised of several specialty areas. “…a national campaign to promote cybersecurity awareness and digital literacy from our boardrooms to our classrooms, and to build a digital workforce for the 21st century.” President Barack Obama, 29 May 2009
NICE Categories (7) & Tasks (31) Acquisition & Program/Proj Management Acquisition & Program/Proj Management Establishing National Standards Job Cyber Leadership Task/Workrole Knowledge, Skills, and Abilities (KSA) • Critical Depth Needed to Build This Highly Technical Workforce
Journeyman Master Apprentice Notional Future Cyberspace Construct Positions CS-T-A CS-T-J CS-T-M CS-T • Right Positions • Right People • Right Qualifications CS-M-1 CS-M-2 CS-M-3 CS/IA-M CSE Field CSSE Designer CS Architect Software Developer CS-SAE Roles Based Auditor Analyst Infrastructure Support Incident Responder Service Provider Manager Other CND Roles/Functions CND • Applies to: • Military • Civilians • Contractors Senior Leaders Qualification
Cyberspace Personnel Qualification A combination of the following: Experience OJT Evaluation Knowledge and Skill Qualified IA Professional Demonstration of Proficiency Background Investigation DoD Certificate(s) Continuing Learning Certification
Cyberspace Workforce Policy • DoDD 8140 Cyberspace Workforce Management Policy Update • Replaces DoDD 8570 Information Assurance (IA) Training, Certification and Workforce Management • Applicable to cyberspace workforce vice IA workforce • Applicable to military, civilian, and contractor cyberspace workforces • Authorizes an integrated cyberspace workforce governance structure • Establishes structure for the supporting Manuals, and revision to the 8570.01-M, Information Assurance Workforce Improvement Program to capture/integrate • Current workforce construct • NICE framework job skills/functions • CYBERCOM workforce mission area requirements
DoDD 8140 Timeline CS WF Policy Committee draft Directive DoDD 8140 August 2012 Initial SD 106 Start14 Dec11 – 15 Dec 2012 January 2013 Comment Adjudication February 2013 Update Policy March 2013 Informal Staffing June 2013 SD 106 December 2013 Publish DEPSECDEF sign Leadership Support, Communication, Coordination
Expected Issuances under Directive 8140 Replaces DoDD 8570.01 DoDD 8140.01 Cybersecurity Manual(s) Law Enforcement/ Counter-Intelligence Manual (LE/CI) Cyber Operations Manual v 8570.01M revision
DoDM 8570 Timeline CS WF Policy Committee draft Directive July 2013 - Begin Drafting Manual CS WF Policy: Sub-committees Draft Issuances March 2014 Initial Draft Completed April 2014 Informal Staffing June 2014 SD 106 August 2014 Publish PSA sign Implementation phase for new requirements Leadership Support, Communication, Coordination
DRAFT DoDD 8140 Cyberspace Workforce Management “It is DoD policy that”: • The DoD will maintain a holistic, total workforce management perspective to provide a pipeline of qualified Cyberspace personnel • Positionsdesignated to perform cyberspace functions will be identified and documented in manpower systems • Civilian, military and contractor personnel assigned to perform cyberspace functions must meet DoD cyberspace qualification standards established in supporting issuances • Cyberspace workforce personnel qualificationswill be documented in records systems • Component compliance is an element of mission readiness • Compliance with this policy will be included in DoD and Component inspection programs • Nothing herein shall be interpreted to subsume or replace the responsibilities, functions, or authorities of the Heads of the DoD Components or other OSD officials as prescribed by law, assigned in chartering DoD directives, or detailed in other DoD policy issuances