You are on page 1of 18

DoD Directive 8570 Information Assurance

Training, Certification and Workforce Management
Frequently Asked Questions
General Questions:
 What is DoD Directive 8570.01?
 What is the status of the Manual (DoD 8570.01-M)?
 How can I get a copy of the Manual?
 I have a version of the Manual with some words in red font or crossed out. Is this a
draft?
 Do I need any special training on how to implement DoD 8570.01?
 What do you mean by Computing Environment, Network Environment or Enclave
Environment?

 What can my Component do to prepare for 8570.01-M requirements?
 How can I identify who is in the IA Workforce?
 How do I identify the IAT workforce?
 How to identify the IAM Workforce?
 How do I report personnel who are filling more than one IA position?

 What support can the Office of the DoD CIO offer to Components to plan for 8570
implementation?
 Will the training and certification requirements specified in DoD Directive 8570.01 and
the 8570.01-M replace Component, Command or community specific training and
certification requirements?

 Have the National Unions agreed to support these requirements?
 What role can the local unions play in the IA WIP?
 What are the contractor certification implementation requirements?
 Has the DoD developed standard contract language for IA WIP requirements?
 How can Components address the requirements for contractors to be certified IAW the
DoD 8570?

Certification Questions
 What are the approved 8570 baseline certifications
 Who needs to be certified?
 Who pays for the certifications?
 How long do I have to become certified?
 What can I do now to prepare for certification requirements?
 Do I have to take the training associated with a certification, or can I just take the test?
 What is the DWCA?
 Once I become certified, what do I do?
 I already hold a certification listed in DoD 8570.01-M, what more do I need to do?

1

who can I talk to?  How do I submit suggestions or new ideas for inclusion in the IA WIP? 2 . How do my annual maintenance fees get paid?  If I fail a certification can I retake the exam?  Can DoD use appropriated funds for military or civilian personnel to take commercial certification exams?  What qualifies for continuous learning? Who to contact  I want more information.

Back to Top  What is the status of the Manual (DoD 8570.01? DoD Directive 8570.dtic.dtic.01-M check the DoD Publications Web-site at http://www.01 provides the basis for an enterprise-wide solution to train. Much of the Directive addresses workforce management issues.mil/whs/directives/corres/pdf/857001m. Until Change 2 of the manual is approved (estimated late summer/early fall 2009). The ultimate vision of the Directive is a sustained. information systems. certify.pdf 3 .01-M)? The 8570 Manual has been approved by the Assistant Secretary of Defense for Networks and Information Integration (ASD NII)/DoD Chief Information Officer (CIO). It is now mandatory for all DoD organizations to comply with its requirements. and manage the DoD Information Assurance (IA) workforce. The Directive’s accompanying manual identifies the specific certifications mandated by the Directive’s enterprise-wide certification program. of the manual has been drafted and is currently in the “formal” staffing process. professional IA workforce with the knowledge and skills to effectively prevent and respond to attacks against DoD information. This effort will enable DoD to put the right people with the right skills in the right place. The policy requires Information Assurance technicians and managers to be trained and certified to a DoD baseline requirement. Change 2. Top priority questions:  What is DoD Directive 8570. Back to Top  How can I get a copy of the Manual? For a copy of the Manual. Correctly identified IA personnel and positions make certain that IA personnel meet training and certification requirements related to their job functions. Components must identify and document personnel positions in manpower databases.mil/whs/directives/corres/pdf/857001m. DoD 8570. and information infrastructures. the policies and guidance of Change 1 (above) are considered the most up to date guidance regarding 8570.pdf An updated version. A copy of the current Manual (Change 1) is available on the DoD Publications website located at: http://www.

01- M implementation training or planning sessions. or command structure.01-M contains definitions for each of these environments. Is this a draft? No. The diagram below portrays basic information about the three levels. Back to Top  What do you mean by Computing Environment. These terms are based on basic system architecture not on base. Neither you. You should disregard any direct messages from vendors indicating a requirement to complete their course or information session as part of DoD 8570.01-M.01-M? No. Furthermore. nor your organization needs special training regarding the implementation of DoD 8570. Back to Top  Do I need any special training on how to implement DoD 8570. Network Environment or Enclave? Understanding these terms is essential to properly identifying your IA Workforce. Though it may have the appearance of a draft document or one written with “track changes”. I have a version of the Manual with some words in red font or crossed out. The DoD Appendix 1 of the 8570. it is actually finalized and published policy. 4 . station. It is WHS policy that any change to an existing DoD policy be designated by red strike through for deleted text and red italics for new text.01-M implementation. The key to the architecture is the location within the GIG and the purpose of the server the IAT or IAM supports directly. the DoD has not sponsored or required any commercial 8570.

In the diagram example. etc. • Networks. A CE has a server with multiple stations working from it. Back to Top  How can I identify who is in the IA Workforce? 5 Encl . levels. An enclave consists of at least two networks controlled by the enclave security policy and procedures. Back to Top  What can my Component do to prepare for 8570. three networks are depicted. remote sensors. Operations Network. and functions for IAT and IAM levels I – III and specialized functions such as CND-SP and IASAE as described in DoD 8570. • Enclave. Logistics Network and Human Resources network connecting to a Component Enclave.01-M requirements? Components should identify IA workforce positions and personnel based on the categories.01-M. The stations can be standard computers.This diagram depicts a basic enclave within a DoD Component: • Computing Environment. Each network consists of at least one Computing Environment. satellite feeds.

Each level of architecture is specifically defined in the Manual. 5. I Back to Top  How do I identify the IAT workforce? IA WF Struc 6 . All positions required to perform IA functions must be identified.01-M establishes the basic requirements. Chapters 3. Positions/personnel required to perform any of these functions are part of the IA workforce. whether it is their primary specialty.The IA WIP is a workforce management program. The current version of the Manual has 4 categories. 4. part-time. system architecture and engineering (IASAE) and computer network defender (CND). secondary specialty or just another duty as assigned (this approach may lead to minimizing/eliminating IATs as an embedded duty group). Network Environment or Enclave?” FAQ. Note that the “IA Level” is related to the system architecture. management (IAM). Also see the Diagram under “What do you mean by Computing Environment. the Network Environment is IAT and IAM Level II. For example. The key to workforce management is the position. Each category has levels based on where the position is located within the overall Information System architecture (see Diagram below). Any person filling that position is automatically part of the IA workforce whether it is full time. the Computing Environment is IAT and IAM Level I. Here are steps to identify IA positions: The DoD 8570. and the Enclave Environment is IAT and IAM Level III. not to an individual’s grade or experience. 10 and 11 of the Manual list IA functions for each level within a category. or an embedded duty. technical (IAT).

01-M.Two basic questions to help identify IA Technical positions: 1. If specialized IA functions (such as Information Assurance System Architect and Engineer (IASAE). • If the answer is no to both #1 and #2. Does the position require privileged access to a DoD information system Computing. or Enclave environment? 2. • If the answer is no to #1 and yes to #2 it may be an IA position but not an IAM position as currently defined in the Manual. Does the position include any of the functional requirements listed in Chapter 3 of the Manual for that level of the information system Architecture? • If the answer to both #1 and #2 is yes the position is an IAT position.01-M reporting requirements are position driven. Does the position include any of the functions listed in Chapter 4 of the Manual for that level of the information system Architecture? • If the answer to both #1 and #2 is “yes” then the position is an IAM position. • If the answer is yes to #1 and no to #2 it is not an IAM position. To effectively “manage” the IA workforce. Network. the DoD Components and local commands must identify any position (table of organization or manning document) required to perform IA functions by category and level. 7 . it is not an IAM position. or Enclave environment? 2. Network. For IA Workforce Management Reporting at the Component and/or DoD CIO DIAP level For this purpose the DoD 8570. • If the answer is no to #1 and yes to #2 it may be an IA Manager or other IA position Back to Top  How to identify the IAM Workforce? Two basic questions to help identify IA Management positions: 1. • If the answer is no to both then it is not an IAT Position. Back to Top  How do I report personnel who are filling more than one IA position? The answer to this question depends on the purpose of the report and the organizational relationships. Does the position have responsibility for managing information system security for a DoD Information System Computing. and Computer Network Defense Service Provider (CND SP)) duties are performed as a subset of the Information Assurance Technical (IAT) or Information Assurance Management (IAM) functions defined in DoD 8570. • If the answer is yes to #1 and no to #2 it is not an IAM position. use those categories and levels.

01-M says Components must: ”…track IA personnel training and certification against position requirements. Personnel filling these positions must be aligned with both positions and maintain the appropriate certification/qualifications for each. That person and their qualifications would be reported against each position. and Computer Network Defense Service Provider (CND SP)) duties are performed as a subset of the Information Assurance Technical (IAT) or Information Assurance Management (IAM) functions defined in DoD 8570. The 2006 FISMA Guidance notes that “if an individual is performing in multiple IA categories. However. Personnel performing IA functions as both Government Service (GS) civilian personnel and military reservists must be reported separately for each position. Since these positions support completely seperate manning and personnel requirements. the information must include the qualifications of the person filling that billet. Their basic requirement is to identify anyone performing IA functions and whether they have been trained to perform those functions. manning requirements. 8 . both positions should be reported individually (reported from each respective organization). For FISMA Reporting: FISMA reporting is based on Office of Management and Budget reporting requirements and is person driven.5. then the position should be reported as not filled. This is how Component/DoD CIO DIAP management can analyze the IA workforce requirements achievement both from a “positions filled” and “positions filled with qualified people” viewpoint. since the person is filling two completely seperate personnel.For Component/DoD CIO DIAP reporting. If specialized IA functions (such as Information Assurance System Architect and Engineer (IASAE). Positions performing both management and technical functions must be identified individually in the appropriate manpower database. only count them in positions they spend the most time performing. use those categories and levels. only report a person performing IA functions one time based on the position they spend the most time performing. If the person is “double hatted”? Performs two roles” due to covering functions for an unfilled IA position. Example B: A GS-12 IAT Level I performs full time IA functions in a designated civilian IA position. This individual is also a Major (0-4) in the Army reserve and performs IAM Level II position functions in that role. The person requirement would also be reported against each position.01-M.2. if the person is performing those functions due to under manning. Therefore if a person is filling more than one IA position that person and their qualifications must be reported against that position requirement.” Example A: A person filling an IAT Level I position and also performing IAM Level I functions should have positions indicated in the manpower documents for each category. of the DoD 8570. Paragraph C7. Thus for FISMA. only count them once based on the IA role in which they spend the highest percentage of their time/effort”.

However. the DoD CIO has included funding in the PDM to support initial implementation requirements including certifications exams and personnel database updates for DoD military and civilian IA Workforce members. For End Strength Reporting: Components must track their personnel against authorized end strength. Components should already have IA training in their budgets and ensure appropriate training is provided for certification exam preparation. Note that in all cases. only count a person one time. This individual is also a Major (0-4) in the Army reserve and performs IAM Level II position functions in that role. Back to Top  What support can the Office of the DoD CIO offer to Components to plan for 8570 implementation? For FY07-FY10.) performs full time IAT Level II functions in a joint combatant command headquarters. The person requirement would also be reported against each position since the person is filling two completely seperate personnel requirements.) 9 . Since these positions support completely seperate manning and personnel requirements. (Note: Funding via the PDM does NOT include training. Each person’s IA certification/qualification should be maintained whether or not they are currently in an IA position.Example A: An IAT Level I is assigned a primary duty (25 hours + per week) to support IA requirements for System A. Since FISMA is person focused. Example C: A Marine Corps Master Sergeant (MSgt. Note joint billets should be identified in the e-Joint Manpower and Personnel System (e-JMAMP). Example B: A GS-12 IAT Level I performs full time IA functions in a designated civilian IA position. as one of their positions in their FISMA Report to the J-6. so in this case the Marine Corps is responsible to provide an appropriately certified Marine for the IA position. both positions should be included in the FISMA report (reported from each respective organization). the operational management of the IA workforce (the IAM) for all systems must know their IA positions and the qualifications of the people filling them. End strength is people driven. There is another empty official “documented position” for System B which is co-located and the individual is required to cover the IA functions of that position (as an additional or embedded duty. Every joint billet is supported by one of the Components. Who should report his position and personnel qualifications to FISMA? The Combatant Command owning the “joint” billet should report the MSgt. For end strength. 24 hours or less per week). you would only report the individual based on the position requiring the highest percentage of their time – System A in this case. the Joint Staff or Combatant Command is responsible to fill that billet with a qualified person and report for FISMA. They must also track each persons’ IA qualifications (no mater what their current position assignment).

The 8570 provides a DoD enterprise-wide IA knowledge and skills baseline. command. The local union cannot negotiate the actual implementation requirements. Components may require personnel performing IA job functions to complete specific certifications in addition to those identified in the Manual. 10 .Starting in FY11. or community specific requirements for IA training and/or certification. Command or community specific training and certification requirements? No.01 and DoD 8570. You are strongly encouraged to work within your Component Human Resources and IA operations leadership to establish a plan for meeting the requirements outlined in DoD 8570. You are still required to comply with relevant Component.01-M replace Component. Back to Top  Have the National Unions agreed to support these requirements? Yes. The National Unions either made no comment or were supportive of the IA WIP. DoD Components must individually budget and pay for DoD military and civilian IA Workforce members’ required certifications as well as include IA WIP sustainment requirements in their budget plans. As part of the DoD’s formal staffing process.01-M. They can participate in the planning for meeting the IA WIP requirements for the Civilian IA Workforce. Back to Top  What role can the local unions play in the IA WIP? The National Consultation (NCR) does not absolve local parties from fulfilling their local bargaining obligations as appropriate prior to implementation of DoD policy. Defense-wide Information Assurance Program (DIAP) personnel are available to provide briefs and to support regional or major command workshops for 8570 implementation planning. Confirm with your direct supervisor or IA leadership that you are categorized and certified at the right level and meet the appropriate Component specific requirements.01 and 8570. USD P&R conducted a “national consultation” (NCR) in which the unions had an opportunity to comment on the Manual. Back to Top  Will the training and certification requirements specified in DoD Directive 8570.

Starting in CY09 – 70% in 09. However. 4. Defense Acquisition Regulations (DARs) Council to include language in the Defense Acquisition Regulations (DFARS). • Order/priority to certify the local IA Workforce may be negotiated. Components should not pay for contractors to obtain/retain required certifications.) Back to Top  Has the DoD developed standard contract language for IA WIP requirements? The DoD Chief Information Officer (CIO) has coordinated with the Undersecretary of Defense for Acquisition. b. 30%. contractor personnel supporting IA functions outlined in Chapters 3. 30% in CY10. (See “Has the DoD developed standard contract language for IA WIP requirements?” FAQ for additional guidance on contractor implementation requirements. Back to Top 11 . 30% in 09. 30% in 09. • The number of retests the organization will fund may be negotiated. For new contracts. As with the military and civilian IA workforce.01-M. In the future they will need to provide verification to the Defense Eligibility Enrollment System (DEERS). Other specific requirements from the Manual include: 1. Technology. and Logistics (AT&L).01-M for the category and level functions in which they are performing. c. Requirements by calendar year: a. 100% by the end of CY10. Back to Top  What are the contractor certification implementation requirements? Contractors performing IA functions on a DoD system must meet the certification requirements established in the DoD 8570. The requirement is for 10% to be certified in the first year and 30% each year following. 30% certification requirements depending on which year the contract starts. This means the contract should include the requirement for the contractor personnel to meet the overall 10%. 30%. 30% in 08. d. Starting in CY07 – 10% in 07. contractors have till December 2010 to meet the requirements of the 8570. and 30% in CY10. and 30% in CY10. Starting in CY08 – 40% in 08. Components may provide additional training on local or DoD specific system procedures. 3. 2. Starting in CY10 – 70% at contract award.For example: • Who needs to be certified is non negotiable. 10 and 11 should be appropriately certified in accordance with the overall five year implementation schedule. The contracting officer will ensure that contracting personnel are appropriately certified.

and length of current contracts. renewal/expiration dates. 12 . Components must ensure that 10% of contractors are certified in CY07 and 30% of contractors are certified each subsequent year attaining 100% certification status by the end of CY10. After reviewing and assessing current IA support contracts and considering: new requirements. How can Components address the requirements for contractors to be certified under the DoD 8570? In general. the contractor implementation requirements described above.01-M (Change 1). Component should plan on one of the following: • Incrementally comply based on expiration/renewal dates for existing contracts • Modify existing contracts to comply with the implementation requirements • Include IA WIP requirements in requests for proposals (RFPs) for new contracts based on the percent of the IA workforce impacted by the contract (see response to “Has the DoD developed standard contract language for IA WIP requirements?”) Back to Top  What are the approved 8570 baseline certifications The following chart depicts the approved baseline certifications as stated in 8570. This chart can be found in Appendix 3 of the Manual. There are a variety of ways Components can operationalize this requirement.

Certification requirements also exist for members of the workforce who perform system design functions such as System Architecture and Engineering (IASAE) and Computer Network 13 . See the FAQ on “How do I identify the IA Workforce?” for more information.01-M apply to all members of the DoD IA workforce including military. The policy defines IAT workforce members as anyone with privileged information system access performing IA functions. and contractors. The training. The requirements apply whether the duties are performed full-time. IAM personnel perform management functions for DoD operational systems described in the Manual. local nationals. and workforce management requirements of 8570. Non- appropriated fund (NAF) personnel. part-time. certification. civilians.Back to Top  Who needs to be certified? Information Assurance Technical (IAT) and IA Management (IAM) personnel must be fully trained and certified to baseline requirements to perform their IA duties. or as an embedded duty.

01-M should be certified. Back to Top  Who pays for the certifications? For FY07-FY10.) Starting in FY11. Calendar year (CY) 2006 is the planning year to develop Component and local IA Workforce Improvement Program (IA WIP) implementation plans. DISA web based training) or external training currently supported by your Component for courses with learning objectives directly aligned to baseline certifications outlined in the Manual. (Note: Funding via the PDM does NOT include training. Back to Top 14 . all personnel performing IAT and IAM functions as described in the DoD 8570. Service Schoolhouse IA courses.. By the end of CY 2011 all personnel performing CND-SP and IASAE roles as described in the DoD 8570. DoD Components must individually budget and pay for DoD military and civilian IA Workforce members’ required certifications as well as include IA WIP sustainment requirements in their budget plans. The Manual requires 10 percent of the IA workforce to become certified in CY07 and an additional 30 percent each year following. The Government cannot pay for contractor certifications or certification preparation training Back to Top  How long do I have to become certified? Components are required to have all identified IA personnel certified to the baseline requirement within five years of the Manual’s publication which was in December of 2005. See Chapters 10 and 11 of the manual for more information on these positions and their requirements.g.Defense (CND) Service Providers. Contact your Components IA Workforce OPR POC for more information. the DoD CIO has included funding in the PDM to support initial implementation requirements including certifications exams and personnel database updates for DoD military and civilian IA Workforce members. Back to Top  What can I do now to prepare for certification requirements? Information Assurance Technical (IAT) and IA Management (IAM) personnel are strongly encouraged to complete DoD training available internally (e. Components should already have IA training in their budgets and ensure appropriate training is provided for certification exam preparation.01-M should be certified. By the end of CY 2010.

Civilian and Contractor personnel who hold active 8570 certifications used by the DoD CIO office to validate. take and pass a “pre-test” or assessment exam).01-M approved certification should access the DWCA website and register their certification by entering their name and certification information and authorizing its release to the certification provider of their certification for verification. what do I do? Register and release all your certifications in the Defense Workforce Certification Application (DWCA): https://www. an email will be sent to the certification provider asking them to verify certification status. For military and civilian personnel.01 and as specified in DoD 8570. Because the DWCA is the only authoritative database for the certification status of IA professionals. By releasing your certification(s) in the DWCA you ensure that the DoD is aware of your certification status and that the information can be validated by the certification providers (e. only those individuals who are correctly registered in it will have their annual maintenance fees paid for. or can I just take the test? Under DoD Directive 8570.osd. SANS. 15 . you should be able to demonstrate the ability to pass the test (e.jsp.mil/appj/dwc/index. This is the authoritative database for all DoD Military. registering your certification(s) in the DWCA will also ensure that any maintenance fees associated with the certification can be paid for by the DoD (until 2011). ISC2.g. Once the certification provider verifies the certification status with their company the certified individual will show up as “validated” in the DWCA system and to the DoD CIO office. Back to Top  Once I become certified. Do I have to take the training associated with a certification. IA members who currently hold an 8570.g.. ISACA. CompTIA). Once the information has been submitted by a certified individual.dmdc. However. monitor and report on the certification status of certified IA workforce members.01-M. For military and civilian personnel. This is the authoritative database of DoD Military. Back to Top  What is the DWCA? DWCA stands for Defense Workforce Certification Application. Your IAM should verify that you are prepared to take the certification exam before authorizing you to request an exam voucher. you are not required to take specific training to prepare for the certification test. registering your certification(s) in the DWCA will also ensure that any maintenance fees associated with your certification can be paid for by the DoD (until 2011). Civilian and Contractor personnel who hold active 8570 certifications.

).). The Manual also requires IATs to obtain a local operating system certification in addition to the baseline requirements. Civilian and Contractor personnel who hold active 8570 certifications.jsp. registering your certification(s) in the DWCA will also ensure that any maintenance fees associated with your certification can be paid for by the DoD (until 2011).dmdc. Back to Top  I already hold a certification listed in DoD 8570.g.g. You will need to maintain your certification status by completing continuous learning requirements as defined by your respective certification provider (e.mil/appj/dwc/index.. CompTIA). CompTIA. This is the authoritative database of all DoD Military. CompTIA. The Manual also requires IATs to obtain a local operating system certification in addition to the baseline requirements. In addition to registering your certification in the DWCA. ISACA. ISC2. etc.01-M. By releasing your certification(s) in the DWCA you ensure that the DoD is aware of your certification status and that the information can be validated by the certification providers (e.osd. etc. ISACA.g. ISC2. You are encouraged to monitor current certification provider activity to see if they have imposed additional continuous learning requirements. You are encouraged to monitor current certification provider activity to see if they have imposed additional continuous learning requirements. For military and civilian personnel. what more will I need to do? Register and release your certifications in the Defense Workforce Certification Application (DWCA): https://www. you should also notify your Component’s IA Workforce personnel point of contact to make certain that your certification status is properly documented in all your Component’s personnel databases of record. registering your certification(s) in the Defense Workforce Certification Application (DWCA) is the only way to ensure that any maintenance fees 16 . Your Component POC should be able to assist you in identifying and meeting any additional requirements of your Component. SANS.In addition to registering your certification in the DWCA. Back to Top  How do my annual maintenance fees get paid? For military and civilian personnel. Your Component POC should be able to assist you in identifying and meeting any additional requirements of your Component. You will need to maintain your certification status by completing continuous learning requirements as defined by your respective certification provider (e. ISC2. ISACA.. you should also notify your Component’s IA Workforce personnel point of contact to make certain that your certification status is properly documented in all your Component’s personnel databases of record.

Back to Top  If I fail a certification can I retake the exam? Yes.01-M is 40 hours annually or 120 hours over a three-year period. Certification providers determine the specific training and other activities that qualify for continuous learning credit. Back to Top  What qualifies as “continuous learning”? Continuing education requirements and acceptable continuous learning activities vary based on certification provider. Back to Top 17 .01-M do not set a limit on the number of times a person may attempt to qualify for certification. then they would qualify to fill an IAT or IAM position (assuming they meet the other requirements such as background investigation. only those individuals who are correctly registered in it will have their annual maintenance fees paid for.01 Manual is not authorized to fill an IAT or IAM billet. Chapter 101 of Title 10. Contact your certification provider to find out more. The minimum continuous learning requirement for certifications included in DoD 8570. If the individual’s Component has set a limit on the number of retest attempts. United States Code has been amended to permit Services to use appropriated funds to pay for commercial certifications (tests) for uniformed personnel. The FY06 DoD Appropriations Bill gives uniformed personnel parity with civilians. etc. Remember.01 and 8570. after CY 2010 a DoD military or civilian employee that has not completed the requirements and certifications outlined in the 8570. Because the DWCA is the only authoritative database for the certification status of IA professionals. Components must support at least one retest attempt but may enforce a limit on the number of additional retests they will fund. If they qualify for certification. OJT. an individual may take a subsequent test at their own expense.associated with the certification can be paid for by the DoD (until 2011). Back to Top  Can DoD use appropriated funds for military or civilian personnel to take commercial certification exams? Yes.). The 8570.

who can I talk to? For more information about DoD Directive 8570.01-Manual or the enterprise-wide training and certification initiative.01. contact the IASE Helpdesk. workforce management and certification.01-M established the DoD IA Workforce Improvement Program Advisory Council as well as sub-committees focused on training. The Council and three committees work to keep the requirements of the IA WIP current by making appropriate updates and improvements.01 Directive and DoD 8570. I want more information. Each major DoD Component is represented by at least one voting member to the Council and the three committees. Contact your Component’s Office of Primary Responsibility Point of Contact to provide direct feedback. Each representative has the role of gathering input from their Component’s IA WF to submit to the Committees and Council. Back to Top  How do I submit suggestions or new ideas for inclusion in the IA WIP? DoD 8570. the 8570. Back to Top 18 .