DIACAP Training In Depth Course Description
Enosecurity offers the most DIACAP Training In Depth course available for students needing to perform DoD Certification and Accreditation (C&A) duties under the DIACAP (Defense Information Assurance Certification and Accreditation Process). DIACAP is the standard DoD process for identifying, implementing and validating Information Assurance controls for all DoD Information Systems.
This DIACAP training In Depth course provides detailed, step-by-step information on how to manage the Information Assurance posture consistent with FISMA, the DODD 8500.1 and the DoDI 8500.2 standards. In the DIACAP Training class, each DoDI 8500.2 IA control is covered in detail. This includes:
• Control Selection
• Verifying Control Implementation
• Preparation steps prior to Control Evaluation
• Validation using one or more accepted validation methods
The DIACAP Training courseware is designed such that it is appropriate for persons acting as the Validator Role, acting as a member of a Validation Team, or persons that undergo the Validation process as a System Owner.
Duration: 3 days
• If you are familiar with some aspects of this DIACAP Training course, we can omit or shorten their discussion.
• We can adjust the emphasis placed on the various topics or build the DIACAP Training course around the mix of technologies of interest to you (including technologies other than those included in this outline).
• If your background is nontechnical, we can exclude the more technical topics, include the topics that may be of special interest to you (e.g., as a manager or policy-maker), and present the DIACAP Training course in manner understandable to lay audiences.
Audience / Target Group
Our DIACAP training is designed for security officials and their staffs, executives, program managers, and operations staff that are or will be involved with IT system DIACAP.
DIACAP Training - Objectives:
After completing this course, attendees will be able to:
• Dealing with transitioning to DIACAP head on
• Cost effective security with minimal performance impact
• How to create organization-wide motivation for IT security
• Exposure to the C&A Process and types of risk assessments
• Awareness of strategies for controlling these efforts and gaining additional resources
• Preparing students to meet FISMA requirements while managing their IT systems more effectively, efficiently, and securely
DIACAP Training - Course Content:
• Introduction and Logistics
• Course Scope
• Exercise – “Build a System”
• Quick Review of IA / C&A
• Introduction to DIACAP
• What Constitutes a System?
• The DIACAP Process (DoDI 8510.01)
• DIACAP Documentation
• Introduction to DoDI 8500.2
• Mission Assurance Category and Confidentiality Level
• Exercise – MAC & CL
• Baseline IA Controls (including implementation and validation)
• Exercise – IA Control Validation
• DITSCAP/DIACAP Comparison
• DITSCAP/DIACAP Transition
• DIACAP Knowledge Service
• Introduction to eMASS
• “Automated C&A” Tools
• Security Testing Tools
• Exercise – Security Testing Tools
• Exercise – DIACAP Application
• Course Summary
• Exercise – DIACAP “Jeopardy”
• Course Evaluation / Q&A